Event ID 680

[M P]

Hi!

I notice continous logs of event id 680 on the security event viewer. It
contains the following information:

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 1/12/2006
Time: 5:52:22 AM
User: NT AUTHORITY\SYSTEM
Computer: DCSERVER
Description:
Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Account Name:
<username>
Workstation:
<computername>

What does this mean? My DC runs on WIndows 2000 Server SP4 and the users
runs on WIndows NT Workstation 4.0 SP6. Hope you could help me.

Me

 

[Galen]

In M P <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Hi!

I notice continous logs of event id 680 on the security event viewer.
It contains the following information:

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 1/12/2006
Time: 5:52:22 AM
User: NT AUTHORITY\SYSTEM
Computer: DCSERVER
Description:
Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Account Name:
<username>
Workstation:
<computername>

What does this mean? My DC runs on WIndows 2000 Server SP4 and the
users runs on WIndows NT Workstation 4.0 SP6. Hope you could help me.

Me

There might be something here that can lead you to the right answer:

http://eventid.net/display.asp?eventid=680&eventno=2267&source=Security&phase=1

I'd there and here:

http://eventid.net/display.asp?eventid=680&source=

It's a handy site actually.

--
Galen - MS MVP - Windows (Shell/User & IE)
http://dts-l.org/
http://kgiii.info/

"We approached the case, you remember, with an absolutely blank mind,
which is always an advantage. We had formed no theories. We were simply
there to observe and to draw inferences from our observations." -
Sherlock Holmes