Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

EVID 4776 can see user name but no workstation

$
0
0
Hi,

Im getting countless logon failures on one of my Domain Controllers. All of the say the same:

EventID            : 4776
MachineName        : xxx.xxx.corp
Data               : {}
Index              : 1833032704
Category           : (14336)
CategoryNumber     : 14336
EntryType          : FailureAudit
Message            : TThe computer attempted to validate the credentials for an account.
                     Authentication Package:    MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
                     Logon Account:l21xxxx_xxxxx
                     Source Workstation:
                     Error Code:    0xc0000064
Source             : Microsoft-Windows-Security-Auditing
ReplacementStrings : {MICROSOFT_AUTHENTICATION_PACKAGE_V1_0, , , 0xc0000064}
InstanceId         : 4776
TimeGenerated      : 25-08-2013 12:52:15
TimeWritten        : 25-08-2013 12:52:15
UserName           : l21xxxx_xxxxx

We have renamed the user name since then we are getting this error message would you please help to find more details about the same


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>