We are getting these failures every 10 minutes in our security log. It happens for 18 users so 18 failure events every 10 minutes.Any tips on troubleshooting what is causing this?
The IP address below is the SBS server IP. The workstation and server name are the SBS 2003 server.
Event Type:Failure Audit
Event Source:Security
Event Category:Logon/Logoff
Event ID:529
Date:3/20/2013
Time:12:08:41 PM
User:NT AUTHORITY\SYSTEM
Computer:DCServer01
Description:
Logon Failure:
Reason:
Unknown user name or bad password
User Name:
username
Domain: DOMAIN
Logon Type:
8
Logon Process:Advapi
Authentication Package:Negotiate
Workstation Name:DCSERVER01
Caller User Name:DCSERVER01$
Caller Domain:DOMAIN
Caller Logon ID:(0x0,0x3E7)
Caller Process ID:7440
Transited Services:-
Source Network Address:192.168.99.5
Source Port:
27568