What's wrong with my Journal account?

[JBruyet]

Hey all, I purchased and installed a Barracuda Message Archiver about a year ago. A part of the installation process was to create an account to journal to, which I did successfully BUT, ever since that time I'm getting the following error message popping up a lot in my Exchange Server Security log:

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 8/5/2009
Time: 12:10:55 PM
User: NT AUTHORITY\SYSTEM
Computer: SRV-EXCHANGE2K7
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: journal
Source Workstation: SRV-EXCHANGE2K7
Error Code: 0xC0000064

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Everything is working fine but I would like to fix this so I won't keep seeing the error in my log. The 0xC0000064 Error Code says that "The account does not exist." Well I created the account on the server, and journaling is working, so I'm not sure what the problem is. Has anyone else dealt with this?

Thanks,

Joe B

 

[58sniper]

Have you looked through

http://eventid.net/display.asp?eventid=680&eventno=2267&source=Security&phase=1

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[JBruyet]

Thanks 58sniper. Looking through at this time.

Thanks,

Joe B