[*ourdomain*] inserted to protect client privacy, domain is listed correctly in the actual error message.
Issue: Workstation name (Windows7) does not exist on the network - see 4625 error message below. TS server gets as many as one of these per minute in some time periods. How do you determine where this is coming from? Thank you in advance.
- John Samuelson
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 3/15/2016 6:21:37 AM
Event ID: 4625
Task Category: Logon
Level: Information
Keywords: Audit Failure
User: N/A
Computer: [*ourdomain*].local
Description:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: customer
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: Windows7
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: NtLmSsp
