Strange Security Log Errors

[John Wart, jr]

I have an issue with one Windows 2000 server. We have many, but only one is
exhibiting this problem. It's a member of a farm of 4 servers that have
identical configurations. Server are all HP Proliant DL380's in a Windows
2000 active directory if it matters.

Every 10 minutes, it writes about 100 events to the security log, a mixture
of Event ID 560 and 562 regarding the Security Account manager.

The process ID the events log correlates to lsass.exe on the server.

I did some googling and searching on the MSKB and didn't find anything that
really stuck out that could be the problem.

There are no scheduled tasks that run at this frequency, rebooting the
server did not help.

Any ideas?

Thanks!

--john

 

[Guest]

Event 560 = http://support.microsoft.com/?kbid=822786
Event: 562 = http://support.microsoft.com/?id=841001