Failure Audit ID 537

M

Mark

We're getting the following security event logged on one
of our W2k SP3 DC constantly between the hours of approx
10.00am and 5-6.00pm GMT(british summer time). It logs
approx eight times per minute, almost every minute between
those times. Anybody have any ideas?.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537

Date: 10/07/2003
Time: 12:18:06
User: NT AUTHORITY\SYSTEM
Computer: <domain controller>
Description:
Logon Failure:
Reason: An unexpected error occurred
during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

I have activated kerberos logging but this doesn't seem to
give any further clues.

Help please.
Mark
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top