Event ID 1000 Userenv

[snootalope]

I'm getting this error message in the application log of my event viewer every morning at about 3 am, 4 am, and then again around 5 am.

User: NT AUTHORITY\SYSTEM

Computer: SERVER1

Description:
Windows cannot determine the user or computer name. Return value (1359).

----------------------------

I can tell a few things for sure.. It's not my backups causing it because that's already been done by like 1 or 2 am.. I'm getting this message on three Win2k + Citrix Metaframe XP FR3 machines.. all of the error are really early in the morning.. I don't get any errors during the day.. Any ideas gentlemen?

"tis better to remain silent and be thought of as a fool..
then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[surfk4t]

I have exactly the same message and similar time during the night. I also get get it when I terminal serve into the server.

My message is similar, exspect it give me a return value of 1317.

When I use the

'net helpmsg 1317' command at a prompt, it says

Specified user does not exist.

I have had a look in AD Users and Computers and I do not find the NT AUTHORITY\SYSTEM account in there.


Does anyone have any idea what is going on?

 

[beezee28]

Go to

http://www.eventid.net

and put in the event id # and it would show you what your problem is and where to go to solve it.

Hope this help.

Beezee28

 

[snootalope]

Did you upgrade from NT4 by chance? We did, maybe that has something to do with it..

"tis better to remain silent and be thought of as a fool..
then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[surfk4t]

We did not upgrade from NT - complete new install.

It has been working really well for around 6 months, and now we get an error.

Will try Event ID.


Cheers