OK, GERRY, HERE IT IS. SINCE FIRST LOOKING AT THESE RESULTS, I HAVE DISABLED
"WORKSTATION", AND CHANGED "NETLOGON" FROM AUTOMATIC TO MANUAL, BOTH IN THE
SERVICES SECTION OF ADMINISTRATIVE TOOLS. PLEASE POST IF YOU SEE ANYTHING
ELSE THAT SHOULD BE CHANGED. I AM USING A SINGLE COMPUTER AND DIAL-UP. NO
LOCAL INTRANET, JUST A SIMPLE SETUP OF ONE COMPUTER AND ITS MODEM. THANKS
FOR LOOKING AT THIS.
1. AFTER SHUTDOWN AND RESTART THESE EVENTS SHOWED UP:
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 12/13/2005
Time: 5:07:45 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: xxxxxxx
Error Code: 0xC000006A
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 12/13/2005
Time: 5:07:45 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: xxxxxxx
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxxx
For more information, see
Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 12/13/2005
Time: 5:07:46 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: xxxxxxx
Error Code: 0xC000006A
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 12/13/2005
Time: 5:07:46 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: xxxxxxx
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxxx
For more information, see
Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 3095
Date: 12/13/2005
Time: 5:07:53 PM
User: N/A
Computer: xxxxxxx
Description:
This computer is configured as a member of a workgroup, not as a
member of a domain. The Netlogon service does not need to run in
this configuration.
For more information, see Help and Support
Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 12/13/2005
Time: 5:08:32 PM
User: N/A
Computer: xxxxxxx
Description:
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.
For more information,
see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 12/13/2005
Time: 5:08:33 PM
User: N/A
Computer: xxxxxxx
Description:
The Human Interface Device Access service terminated with the
following error:
The specified module could not be found.
For more information,
see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2.AFTER INVOKING STANDBY MODE, AND SUBSEQUENTLY TRYING TO LOGON TO MY HOME
PAGE (AGAIN UNSUCCESSFULLY, BUT DID APPEAR TO GET HOOKED UP OK TO ISP
SERVER), THESE ADDITIONAL ITEMS SHOWED UP:
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 12/13/2005
Time: 5:23:08 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: xxxxxxx
Error Code: 0xC000006A
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 12/13/2005
Time: 5:23:08 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: xxxxxxx
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxxx
For more information, see
Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
After attempting to connect to internet:
Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 12/13/2005
Time: 5:07:56 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: xxxxxxx
Description:
IPSec Services: IPSec Services failed to get the complete
list of network interfaces on the machine. This can be a potential
security hazard to the machine since some of the network
interfaces may not get the protection as desired by the applied
IPSec filters. Please run IPSec monitor snap-in to further
diagnose the problem.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 12/13/2005
Time: 5:23:08 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: xxxxxxx
Error Code: 0xC000006A
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 12/13/2005
Time: 5:23:08 PM
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxx
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: xxxxxxx
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: xxxxxxx
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 12/13/2005
Time: 5:30:21 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: xxxxxxx
Description:
IPSec Services: IPSec Services failed to get the complete
list of network interfaces on the machine. This can be a potential
security hazard to the machine since some of the network
interfaces may not get the protection as desired by the applied
IPSec filters. Please run IPSec monitor snap-in to further
diagnose the problem.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.