672 Many Authentication Ticket Granted Expand / Collapse
Author
Message
Posted 10/25/2011 1:45:24 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 5/19/2011 7:55:49 AM
Posts: 1, Visits: 0
Hi,
I noticed on my network, a lot of TGT (eventID 672 on our DC) - about 300 per hours - delivered to the same member server, and same service account. I understood that a user request an authentication ticket everytime he wanted to get access to a specific machine running some application. But why so many TGT from the same user, and from the same source server???
Cheers and thank in advance for your help
Post #825
Posted 11/14/2011 8:51:42 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
this could be due to so many things.  Look at what is running on that computer and what makes that user or computer different than others?
Post #848
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 10:42pm