Logon Failure: Reason: Unknown user name or bad password User Name: Rmullins Domain: THE3RDMAN Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: T3MSERVER2 Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.168.1.2 Source Port: 41311
I recently installed some eventlog collection software on a server (T3MSERVER2) but in the process used the wrong login details. Now the error log above is appearing on all of the remote servers that the eventlogs were supposed to of been collected from. I have removed the software/services but the login failures seem to continue. I have checked all the services on T3MSERVER2 but there is no record of a service using the details above.
Is there any other way of determining the source of the login failures coming from T3MSERVER2?
Any info appreciated.
Start Free Trial
