failure aduits using sim

[Jonathan Clark_2]

whenever i run sim I get the following failed audits in my security log every five minutes

Event Type: Failure Audit

Event Source: Security

Event Category: Account Logon

Event ID: 681

Date: 10/16/2005

Time: 1:05:12 PM

User: NT AUTHORITY\SYSTEM

Computer: NET1

Description:

The logon to account: administrator

by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

from workstation: APP6

failed. The error code was: 3221225578


If I shutdown the SIM process this stops. I believe this maybe due to the Domain Admin password change recently, however I cannot find in sim where the password could have been used. Can someone tell me anywhere you can put a windows username/password to authenticate?

JUST FYI
SIM performance has not changed at all. It still monitors and alerts fine, its just killing my event logs.

[Steve Kadish]

Hi Jonathan,

Could you please be more specific about which machines security logs the errors are showing up in, and what machines NET1 and APP6 are?

Thanks,
- Steve Kadish

[Jonathan Clark_2]

net1 is the DC
app6 is the SIM Computer

[Nancy Kafer]

I'm seeing this same error on one of my domain controllers that is a desktop machine. Have you figured out how to get rid of this message?

Thanks.

[Dean C]

options/protocol settings/global protocol settings have some username/passwords (WEBM section) if your using them