4776 Authentication failed with blank source... Expand / Collapse
Author
Message
Posted 9/21/2016 5:52:36 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 9/23/2016 10:02:36 AM
Posts: 2, Visits: 10
Hello.

I have some 4776 events with blank source host name field.
In whith cases it is possible?
And how i can determine the source?
Post #6266
Posted 9/26/2016 6:48:50 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
In logon event failures (4625) there it is noted that the workstation name may not always be available: "The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases". I'm guessing that the workstation name may not always be available for this event for the same reasons.
Post #6271
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:13am