Forum

Ultimate Windows Security Forum » Security Log » 4625 - An account failed to log on » Wierd logs in a reghosted image of Windows...

Wierd logs in a reghosted image of Windows... Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
gurrapu.praveen
Posted 8/30/2011 9:53:40 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 9/27/2011 10:16:02 AM
Posts: 3, Visits: 2
Hi,

I have a Windows 2008 R2 Server machine which is reghosted from an image. It logs audit log events with Event ID: 4625, Sub-status code: 0xc0000064 and Event Type: 3. It logs these events at a frequency of atleast 10 events per minute. Is there any way to suppress these events?

Also, I am trying to generate a failed logon event on that machine. But, when I enter wrong credentials and check the event log, I don't find any event with Event Type 2.

Thank you in advance.


Regards,
Praveen

Post #793
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:44am