Server Management - Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

failure aduits using sim

Jonathan Clark_2
Frequent Advisor

failure aduits using sim

whenever i run sim I get the following failed audits in my security log every five minutes

Event Type: Failure Audit

Event Source: Security

Event Category: Account Logon

Event ID: 681

Date: 10/16/2005

Time: 1:05:12 PM

User: NT AUTHORITY\SYSTEM

Computer: NET1

Description:

The logon to account: administrator

by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

from workstation: APP6

failed. The error code was: 3221225578


If I shutdown the SIM process this stops. I believe this maybe due to the Domain Admin password change recently, however I cannot find in sim where the password could have been used. Can someone tell me anywhere you can put a windows username/password to authenticate?

JUST FYI
SIM performance has not changed at all. It still monitors and alerts fine, its just killing my event logs.
4 REPLIES
Steve Kadish
Trusted Contributor

Re: failure aduits using sim

Hi Jonathan,

Could you please be more specific about which machines security logs the errors are showing up in, and what machines NET1 and APP6 are?

Thanks,
- Steve Kadish
Jonathan Clark_2
Frequent Advisor

Re: failure aduits using sim

net1 is the DC
app6 is the SIM Computer
Nancy Kafer
Frequent Advisor

Re: failure aduits using sim

I'm seeing this same error on one of my domain controllers that is a desktop machine. Have you figured out how to get rid of this message?

Thanks.
Dean C
Occasional Contributor

Re: failure aduits using sim

options/protocol settings/global protocol settings have some username/passwords (WEBM section) if your using them