EventID 100 Source MSFTPSVC shows up in event viewer alot.

[Empeethree]

This event code EventID 100 Source MSFTPSVC with the message of

The server was unable to logon the Windows NT account 'admin' due to the following error: Logon failure: unknown user name or bad password. The data is the error code.

Has been showing up in my event viewer after I recently changed the admin password. I have checked everywhere I can possibly think of to make sure any service / setting is using the new password, but cant seem to find it anywhere.

The FTP site is not set up to allow anonymous access.

I have ran out of ideas, searched deja, microsoft , and about 3 other bbs's and no luck.

any ideas??


thanks in advance
Rob

 

[Empeethree]

One thing I forgot to mention...

The event is showing up about every 20 some seconds, and fills my system log..


rob

 

[Junior1544]

do you have exchange running on this system too?? that sounds like exchange may be using the admin with the old password...

 

[Empeethree]

Yes, exchange is also on the machine. I have changed everything I could find in exchange.

The FTP log file is showing the admin trying to login but not being successful

thanks
rob