Security Log Errors

H

HelpPls

We are currently testing a single 2000 DC environment upgrade to a 2003 DC.
We modified the schema on the 2000 server and added a 2nd DC which is
running Server 2003. All seems to be going fine except for one thing. I
noticed that the Security log on the 2003 DC has a LOT of the following
failure audits. Is this something to be concerned about? Is there a
configuration fix?

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 673
Date: 4/5/2004
Time: 3:18:41 AM
User: NT AUTHORITY\SYSTEM
Computer: W2K3DC
Description:
Service Ticket Request:
User Name:
User Domain: UPGRADE.LOCAL
Service Name: host/w2k3dc.upgrade.local
Service ID: -
Ticket Options: 0x40830000
Ticket Encryption Type: -
Client Address: 127.0.0.1
Failure Code: 0xD
Logon GUID: -
Transited Services: -

Thanks - Sean

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
C

Clif Godfrey

I am seeing the same error after following the following process:

1. Install new Windows 2000 system
2. DCPromo to make it a DC
3. Make the system Global Catalog
4. Configure DHCP and DNS to take place of my current DC
5. Move FSMO Roles to new DC
6. Run adprep /forestprep on new DC
7. run adprep /domainprep on new DC
8. once things had settled for a few hours, removed original DC from
domain.
9. Reformated orginal DC and installed with Windows 2003
10. Joined original DC back to the domain
11. ran DCPromo to retore system to DC status
12. Reconfigured DNS and DHCP back on the original system
13. Moved FSMO roles back to the original DC
14. Removed "Upgraded" DC from the domain

Now I get the following every 15 mins:
===============================================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 673
Date: 4/7/2004
Time: 10:12:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TEST
Description:
Service Ticket Request:
User Name:
User Domain: UPGRADE.LOCAL
Service Name: host/test.upgrade.local
Service ID: -
Ticket Options: 0x40830000
Ticket Encryption Type: -
Client Address: 127.0.0.1
Failure Code: 0xD
Logon GUID: -
Transited Services: -


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
===============================================================================
I've seen many postings on many boards of people seeing this error
after the windows 2003 Upgrade. One board actually suggested that a
patch exists (Q824905?). Anyone else know about whether this patch is
available to the public yet? I am anxious to get moving on bringing
my domain up to Windows 2003 due to the impending deployment of
Exchange 2003 and Microsoft CRM, would like to get the domain upgraded
just to avoid having to do that in future after the schema has been
extended by the latter two applications.

Thanks,
Clif Godfrey
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top