topic Re: failure aduits using sim in Server Management - Systems Insight Manager

failure aduits using sim

Jonathan Clark_2 — Wed, 26 Oct 2005 17:53:30 GMT

whenever i run sim I get the following failed audits in my security log every five minutes

Event Type: Failure Audit

Event Source: Security

Event Category: Account Logon

Event ID: 681

Date: 10/16/2005

Time: 1:05:12 PM

User: NT AUTHORITY\SYSTEM

Computer: NET1

Description:

The logon to account: administrator

by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

from workstation: APP6

failed. The error code was: 3221225578

If I shutdown the SIM process this stops. I believe this maybe due to the Domain Admin password change recently, however I cannot find in sim where the password could have been used. Can someone tell me anywhere you can put a windows username/password to authenticate?

JUST FYI
SIM performance has not changed at all. It still monitors and alerts fine, its just killing my event logs.

Re: failure aduits using sim

Steve Kadish — Fri, 28 Oct 2005 09:21:21 GMT

Hi Jonathan,

Could you please be more specific about which machines security logs the errors are showing up in, and what machines NET1 and APP6 are?

Thanks,
- Steve Kadish

Re: failure aduits using sim

Jonathan Clark_2 — Fri, 28 Oct 2005 10:06:12 GMT

net1 is the DC
app6 is the SIM Computer

Re: failure aduits using sim

Nancy Kafer — Tue, 07 Mar 2006 22:01:57 GMT

I'm seeing this same error on one of my domain controllers that is a desktop machine. Have you figured out how to get rid of this message?

Thanks.

Re: failure aduits using sim

Dean C — Tue, 07 Mar 2006 23:34:15 GMT

options/protocol settings/global protocol settings have some username/passwords (WEBM section) if your using them