Excessive Logon Failures

[MarkG]

Recently there were approximately 5000 entries in the security log associated
to event 680, error code = 0xC000006A. The message indicated that the 'user
name is correct, password is wrong'. This seems odd as it did not trigger an
account lockout. The events were recorded over a period of an hour and a
half. Source host was a network pc and the destination host was DC.

Any suggestions as to what might be the source of these would be helpful.

 

[Jess L.]

you can use ALTools.exe from Microsoft, but it will not work under Vista.