Security 680 Audit Failure 9 \SYSTEM... Expand / Collapse
Author
Message
Posted 8/4/2011 6:50:46 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 11/11/2009 2:01:15 PM
Posts: 1, Visits: 0
Hi Randy,
We're seeing a new message for event ID 680 with hex 0xC0000199 which I can't identify.

Username: vmachine$ (user's VM)
Source: srcmachine (user's primary workstation)
Message: Security 680 Audit Failure 9 \SYSTEM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 machine$ \\srcmachine 0xC0000199

The user has verified he doesn't run Samba nor connects to a machine that runs it. Thoughts?
Thanks.
Post #778
Posted 8/10/2011 9:30:24 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
Sorry but the message is missing the field labels and I don't know what that field that hexcode is coming from...
Post #783
Posted 10/13/2011 6:27:23 PM
Genius

GeniusGeniusGeniusGeniusGeniusGeniusGeniusGenius

Group: Forum Members
Last Login: 12/22/2011 4:55:21 PM
Posts: 12, Visits: 3
Hi,

Here you have status code http://msdn.microsoft.com/en-us/library/cc704588(v=prot.10).aspx

0xC0000199
STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

The account used is a computer account. Use your global user account or local user account to access this server.

Regards

Post #819
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 7:58am