Page:1/1
10/4/2005 4:47:21 PM
Domain Administrator account logon failures
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
Security
Categories
Account Logon
IDs
675,676,681
Logs
All
Types
Failure Audit
Message Search Criteria
Include events with any of the message text keywords: administrator
Time Frame
Last 4 Month(s)
Start Date Time
2005-07-01 00:00:00
End Date Time
2005-11-01 00:00:00
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
9/19/2005 12:16:28 PM
675
Security
Failure Audit
Account Logon
Security
HERCULES
SYSTEM
Pre-authentication failed:
User Name: Administrator
User ID: SHARKS\Administrator
Service Name: krbtgt/SHARKS
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 192.168.0.105
Count: 2
LOGCASTER SERVER
9/6/2005 12:33:24 PM
675
Security
Failure Audit
Account Logon
Security
HERCULES
SYSTEM
Pre-authentication failed:
User Name: Administrator
User ID: SHARKS\Administrator
Service Name: krbtgt/SHARKS
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 127.0.0.1
Count: 2