Security Event 681

[Francis Tang]

Dear All,

I have two domains, DomainA is use primarily for Terminal
Servives application while DomainB is my main network.
DomainA is configured with a Windows 2000 DC and a member
server while DomainB is still a Windows NT4 PDC, BDC and
a few Windows 2000 member servers.

All the company staff will logon to DomainB to gain
access to internet, and other resources. They do not have
access to servers in DomainA.

From the event viewer (security log) of DomainA, I
noticed a lot of entries with event 681 from users of my
DomainB network. What could this mean? How could this
happen?

I have serach knowledge based but was unable to get a
accurate answer.

Please help.

Thank you.

 

[Steven Umbach]

Can they see the other computers in Network Places/Explorer? If so
you may have some curious users trying to access shares that way. That can cause
the event ID 681 that you are seeing. See link to article about Event Id 681
where you can interpret the failure reason codes. -- Steve

http://www.jsifaq.com/SUBG/TIP3200/rh3207.htm