4625 - Local User Hit to domain controller... Expand / Collapse
Author
Message
Posted 8/12/2016 8:01:21 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/12/2016 7:57:43 AM
Posts: 1, Visits: 0
Hello,

any help, Local User Hit to domain controller Many time. it's local user account not sure why it goes to domain controller

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: asdf
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: WIN-R9H529RIO4Y
Source Network Address: 10.42.42.201
Source Port: 53176
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
Post #6249
Posted 8/16/2016 8:40:34 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
The error code indicates that the username does not exist. There isn't enough additional information to determine why this occurring. You will have to investigate the source computer for possibilities.
Post #6254
Posted 9/29/2016 11:22:12 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 9/29/2016 11:15:40 AM
Posts: 1, Visits: 0
Install Process Monitor and see what is communicating to your DC. Then you can use Process Explorer to see the process that is running.
Post #6275
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 10:49pm