Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 1/20/2014
Time: 8:20:50 AM
User: NT AUTHORITY\SYSTEM
Computer: Server1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: hostadmin
Domain: DOM
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: Server2
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: xxxxxxxxxxx
Source Port: 0
We are getting above alert continuously on the server now.
But before that we got the event 680 once, after that this 629 events flow are genrated. After that event 680 is not occured.
could you please suggest possible solution to stop this 629 events on server.