UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 529 - Logon Failure - Unknown user name or bad password / Logon types question / Latest Posts

RE: Logon types question

RandyFranklinSmith — Mon, 02 Nov 2009 08:51:58 GMT

Could either your post some examples? Also specify OS and SP level and type of computer: workstation, domain controller, member server. What applications, etc.

RE: Logon types question

janetvelasquez80l — Sun, 01 Nov 2009 22:31:57 GMT

.

hi, i have been experiencing this same kind of problem. What causes this problem?

[url=http://www.hubschrauber-selber-fliegen.eu]Hubschrauber selber fliegen[/url]

Logon type 0

lerdahl — Fri, 09 Oct 2009 09:39:18 GMT

I am seeing a lot of failed log attempts that are reporting a logon type of 0. All of the documentation I can find tells me types 0&1 aren't used. Any idea what might be causing this?

RE: Logon types question

RandyFranklinSmith — Wed, 26 Aug 2009 13:15:00 GMT

Could be a lot of things but first place I would look is for a workstation with a persistent drive mapping using an old password for some account. How many accounts are generating the 529s?

Logon types question

jwalzer — Mon, 24 Aug 2009 14:51:19 GMT

Randy,

Currently we are using GFI for event log management and when I run a report on 'Failed Logins' pulling from event ID 529, under 'logon type' 99.9% of them show as 'Network'. If I run a report looking for 'interactive' there are none. Any idea why the majority of failed logins under event ID 529 show up as 'Network' with very little listed as 'interactive'?

Thanks