Repeated 529 Logon errors

[Dan Harpold]

About every two minutes, one of my XP machines is generating four of these
messages. There is no indication of which account, or machine is
responsible.

==========================

Logon Failure:
Reason: Unknown user name or bad password
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

==========================

Any ideas on where to start???

Thanks,
Dan

 

[Chris Holden]

About every two minutes, one of my XP machines is generating four of these
messages. There is no indication of which account, or machine is
responsible.

==========================

Logon Failure:
Reason: Unknown user name or bad password
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

==========================

Any ideas on where to start???

Thanks,
Dan

The first thing I would do is disconnect it from the network. If the events
are still logged, I would look at and AV software or any other software that
might need a username and password that might have been entered wrong.
I assume you are running some kind of firewall? Is netbios over TCP/IP
disabled?
The up side of the messages is that at least whatever it is can't log on!
Chris

 

[Dan Harpold]

The first thing I would do is disconnect it from the network. If the events
are still logged, I would look at and AV software or any other software that
might need a username and password that might have been entered wrong.
I assume you are running some kind of firewall? Is netbios over TCP/IP
disabled?
The up side of the messages is that at least whatever it is can't log on!
Chris

OK, I think I found out what it is. I ran a sniffer and see that my domain
controller is requesting an SMB Session Setup AndX Request which the
workstation is responding to with an error. The machine was set up to
dual-boot with WIndows 2003 Server and the domain controller is still trying
to contact the server installation. Therefore, the workstation is throwing
the error.

I removed all references to the server install from DNS and the error
stopped.

Thanks fo ryour help,
Dan

 

[Chris Holden]

OK, I think I found out what it is. I ran a sniffer and see that my domain
controller is requesting an SMB Session Setup AndX Request which the
workstation is responding to with an error. The machine was set up to
dual-boot with WIndows 2003 Server and the domain controller is still trying
to contact the server installation. Therefore, the workstation is throwing
the error.

I removed all references to the server install from DNS and the error
stopped.

Thanks fo ryour help,
Dan

I have to say, why didn't you detail the dual boot in our original post?
Chris

 

[Chris Holden]

I have to say, why didn't you detail the dual boot in our original post?
Chris

 

[Chris Holden]

I have to say, why didn't you detail the dual boot in our original post?
Chris

Okay, 'your' not 'our'. I'm a fool sometime too.
Chris