steinshouerj
IS-IT--Management
I started noticing these logon failures in my security logs with strange characters in Logon Process. The server is a domain controller. The error occurs more than once and the entries are not consecutive. Also, the characters are not the same in any of the entries.
Has any seen this before? Does anyone know what would cause this?
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 5/31/2006
Time: 5:15:04 AM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Logon Failure:
Reason: An error occurred during logon
User Name: SERVER$
Domain: DOMAIN
Logon Type: 3
Logon Process: Ðù¨Nk
Authentication Package: NTLM
Workstation Name: SERVER
Status code: 0xC000006D
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -
Has any seen this before? Does anyone know what would cause this?
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 5/31/2006
Time: 5:15:04 AM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Logon Failure:
Reason: An error occurred during logon
User Name: SERVER$
Domain: DOMAIN
Logon Type: 3
Logon Process: Ðù¨Nk
Authentication Package: NTLM
Workstation Name: SERVER
Status code: 0xC000006D
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -
