Hi all. I have just seen an error in my security log on a Windows 2003 member
server. My setup is an Windows 2000/2003 AD. In the security log on all my
windows 2003 member servers is the following every 15 min. :
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 09-02-2006
Time: 14:45:30
User: NT AUTHORITY\SYSTEM
Computer: HERMOD
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain:
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: \\GERDE13D0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.199.211
Source Port: 0
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
What happens every 15 minuts that can generate this error?
An error in the application log says the following everytime the computer
starts:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 09-02-2006
Time: 13:24:18
User: NT AUTHORITY\SYSTEM
Computer: HERMOD
Description:
Windows cannot obtain the domain controller name for your computer network.
(The specified domain either does not exist or could not be contacted. ).
Group Policy processing aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
I have run DCDiag and Netdiag with success. I have no problems using the
network at all. But am about to install an Exchange 2003 server and want to
be shure that i dont get any problems.