Continuous 680 events with Administrator... Expand / Collapse
Author
Message
Posted 9/27/2012 3:17:39 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 9/27/2012 4:17:30 PM
Posts: 1, Visits: 2
I am getting the following event over and over on my DC about every 30 seconds:

<13>Sep 27 11:40:22
AgentDevice=WindowsLog
AgentLogFile=Security
PluginVersion=1.0.14
Source=Security
Computer=DC1
User=SYSTEM
Domain=NT AUTHORITY
EventID=680
EventIDCode=680
EventType=16
EventCategory=9
RecordNumber=347157651
TimeGenerated=1348764021
TimeWritten=1348764021
Message=Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: administrator
Source Workstation: DC1
Error Code: 0xC0000234

The Administrator account is disabled but the machine continually creates the logs with both the computer and source workstation as the DC. Is there a way I can figure out why these logs are continually generated? Or the source address?

Thanks-
Post #1109
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 7:57am