Hello everyone,
we keep receiving the event log 540 and 680 on the exchange server event log. can we stop that? The problem is when user do the send and receive under the MS outlook. it will create the event 540 and 680 at the same time in the exchange server.
i can say 1000+ same event log per day and it keep growing.
Please advise. Thanks
Here is one of the same of the event log when doing send and receive under the outlook
Log Name: d:\Users\Administrator\Desktop\EventLog-2014May5.evt Source: Security Date: 5/5/2014 2:20:47 PM Event ID: 680 Task Category: Account Logon Level: Information Keywords: Classic,Audit Failure User: SYSTEM Computer: MAILSVR1 Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: corporateitsupport1 Source Workstation: B7DVPR1 Error Code: 0xC0000064 ******************************************************* Log Name: d:\Users\Administrator\Desktop\EventLog-2014May5.evt Source: Security Date: 5/5/2014 2:20:47 PM Event ID: 540 Task Category: Logon/Logoff Level: Information Keywords: Classic,Audit Success User: S-1-5-21-1239700588-679230071-654838779-1908 Computer: MAILSVR1 Description: Successful Network Logon: User Name: CorporateITSupport1 Domain: PRECISEINTERNET Logon ID: (0x0,0xE603B408) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: B7DVPR1 Logon GUID: - Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: - Source Port: - Caller Process Name: %16