Failure Audits in Event Viewer

Any idea why these errors would be logged. I think thats it's kerberos
related however there is limited information on this event as you can see.
Heres the output.
BTW, it's 2003 Server and XP and 2000 workstations.

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 673
Date: 10/28/2004
Time: 7:53:36 AM
User: NT AUTHORITY\SYSTEM
Computer: [My Server Name]
Description:
Service Ticket Request:
User Name:
User Domain:
Service Name:
Service ID: -
Ticket Options: 0x2
Ticket Encryption Type: -
Client Address: 10.208.70.101
Failure Code: 0x20
Logon GUID: -
Transited Services: -


Thanks for the help.

"Bobby28" <(E-Mail Removed)> wrote in message
news:88A0244D-C4BF-455B-BA9C-(E-Mail Removed)...
> Any idea why these errors would be logged. I think thats it's kerberos
> related however there is limited information on this event as you can see.
> Heres the output.
> BTW, it's 2003 Server and XP and 2000 workstations.
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 673
> Date: 10/28/2004
> Time: 7:53:36 AM
> User: NT AUTHORITY\SYSTEM
> Computer: [My Server Name]
> Description:
> Service Ticket Request:
> User Name:
> User Domain:
> Service Name:
> Service ID: -
> Ticket Options: 0x2
> Ticket Encryption Type: -
> Client Address: 10.208.70.101
> Failure Code: 0x20
> Logon GUID: -
> Transited Services: -
>
>
> Thanks for the help.

Because you setup security auditing? Were the fields all blank or did you
edit them?

Matt
MCT, MCSE

Yes they were all exactly as you see, with the exception of taking out my
server name.

"Matt Anderson" wrote:

>
> "Bobby28" <(E-Mail Removed)> wrote in message
> news:88A0244D-C4BF-455B-BA9C-(E-Mail Removed)...
> > Any idea why these errors would be logged. I think thats it's kerberos
> > related however there is limited information on this event as you can see.
> > Heres the output.
> > BTW, it's 2003 Server and XP and 2000 workstations.
> >
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Account Logon
> > Event ID: 673
> > Date: 10/28/2004
> > Time: 7:53:36 AM
> > User: NT AUTHORITY\SYSTEM
> > Computer: [My Server Name]
> > Description:
> > Service Ticket Request:
> > User Name:
> > User Domain:
> > Service Name:
> > Service ID: -
> > Ticket Options: 0x2
> > Ticket Encryption Type: -
> > Client Address: 10.208.70.101
> > Failure Code: 0x20
> > Logon GUID: -
> > Transited Services: -
> >
> >
> > Thanks for the help.
>
> Because you setup security auditing? Were the fields all blank or did you
> edit them?
>
> Matt
> MCT, MCSE
>
>
>