Event log

[Elie Mrad]

I always have this event on my event viewer, and I install
sp4 but the problem still are the same.
Event ID: 675
Pre-authentication failed:
User Name: user
User ID: domain\user
Service Name: krbtgt/domain
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 1xx.1xx.1xx.1xx

 

[Dan [MSFT]]

Make sure that user is not logged onto more than one
machine or has a disconnected (but still active) terminal
server session. If the process that's sending bad
credentials (and locking out account) is actually running
on the same machine that the 675 events are occuring on,
the client IP address will be 127.0.0.1

Thahks,

Dan Boldo [MSFT]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and
confers no rights.