9/15/2004 03:57:53 8 2 540 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D71) 3 Kerberos Kerberos
9/15/2004 03:57:53 8 2 538 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D71) 3
9/15/2004 03:57:53 8 2 540 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D8C) 3 Kerberos Kerberos
9/15/2004 03:57:53 8 2 538 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D8C) 3
...(This type of event occurs 30 - 120 times per second)
In this case, MAIL is the Exchange server and OFFICEDC is the DC for the domain OFFICE.
I enabled "Audit success logon events" for the domain controller and I found that the event log is flooded with logon events from MAIL$.
Each pair(538/540) of the events appears 30 - 120 times per second!!!(24 hours a day)
What could be the possible cause of this?
Any replication could cause this?
Any service on the Exchange Server would need to connect to the DC continously?
MAIL is a freshly installed Exchange server of the domain and have no other tasks to handle.
9/15/2004 03:57:53 8 2 538 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D71) 3
9/15/2004 03:57:53 8 2 540 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D8C) 3 Kerberos Kerberos
9/15/2004 03:57:53 8 2 538 Security OFFICE\MAIL$ DC MAIL$ OFFICE (0x0,0x25916D8C) 3
...(This type of event occurs 30 - 120 times per second)
In this case, MAIL is the Exchange server and OFFICEDC is the DC for the domain OFFICE.
I enabled "Audit success logon events" for the domain controller and I found that the event log is flooded with logon events from MAIL$.
Each pair(538/540) of the events appears 30 - 120 times per second!!!(24 hours a day)
What could be the possible cause of this?
Any replication could cause this?
Any service on the Exchange Server would need to connect to the DC continously?
MAIL is a freshly installed Exchange server of the domain and have no other tasks to handle.
