Hi,
I have noticed a huge amount of entries in my DC Security Event log with this event, all from one Windows 7 Pro workstation in our domain.
Account for which logon failed:
Security ID: NULL SID
Account Name: NetworkService
Account Domain: <Workstation Name>
In a one-day period, I have approximately 2,000 such entries for just this one <Workstation>.
Unfortunately, I haven't found any information as to what is causing it.
Process Information is empty.
Any clues as to how to determine what is causing these events would be greatly appreciated.
Thanks,
David