Repeated 529 Logon errors

  • Thread starter Thread starter Dan Harpold
  • Start date Start date
D

Dan Harpold

About every two minutes, one of my XP machines is generating four of these
messages. There is no indication of which account, or machine is
responsible.

==========================

Logon Failure:
Reason: Unknown user name or bad password
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

==========================

Any ideas on where to start???

Thanks,
Dan
 
Dan Harpold said:
About every two minutes, one of my XP machines is generating four of these
messages. There is no indication of which account, or machine is
responsible.

==========================

Logon Failure:
Reason: Unknown user name or bad password
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

==========================

Any ideas on where to start???

Thanks,
Dan
Click to expand...

The first thing I would do is disconnect it from the network. If the events
are still logged, I would look at and AV software or any other software that
might need a username and password that might have been entered wrong.
I assume you are running some kind of firewall? Is netbios over TCP/IP
disabled?
The up side of the messages is that at least whatever it is can't log on!
Chris
 
Chris Holden said:
The first thing I would do is disconnect it from the network. If the events
are still logged, I would look at and AV software or any other software that
might need a username and password that might have been entered wrong.
I assume you are running some kind of firewall? Is netbios over TCP/IP
disabled?
The up side of the messages is that at least whatever it is can't log on!
Chris
Click to expand...

OK, I think I found out what it is. I ran a sniffer and see that my domain
controller is requesting an SMB Session Setup AndX Request which the
workstation is responding to with an error. The machine was set up to
dual-boot with WIndows 2003 Server and the domain controller is still trying
to contact the server installation. Therefore, the workstation is throwing
the error.

I removed all references to the server install from DNS and the error
stopped.

Thanks fo ryour help,
Dan
 
Dan Harpold said:
OK, I think I found out what it is. I ran a sniffer and see that my domain
controller is requesting an SMB Session Setup AndX Request which the
workstation is responding to with an error. The machine was set up to
dual-boot with WIndows 2003 Server and the domain controller is still trying
to contact the server installation. Therefore, the workstation is throwing
the error.

I removed all references to the server install from DNS and the error
stopped.

Thanks fo ryour help,
Dan
Click to expand...

I have to say, why didn't you detail the dual boot in our original post?
Chris
 
Back
Top