My Situation:
My Situation
Domain Server: Windows server 2003 for Small Business Server Service Pack 2
Intel Xeon CPU 2.80Ghz and 3.62GB of Ram 1 Application server and
Windows XP Professional version 2002 Service Pack 3
Intel Pentium processor 2.80ghz and 1GB of ram
Intel(R) Pro/100 VE Network Card
I connect to company domain via Linksys workgroup switch.
Everyday for past month I get up to 98 occurrences of Event ID 537 and Event ID 529 see
below. ID-537 is always from my login ID-529 is from several different logins. I can log
into the network ok but after I've been on for 1-2 hours I begin loosing network
connectivity and the internet hangs or stops alltogether. I have 13 other users on this
network and none are having this problem.
Normally I have my workstation plugged into a workgroup switch which is shared by a unix
box. I tried plugging the network cable directly into the wall port but same thing
happens. Can you tell me how to 1) find out what is causing this. 2) stop it from
happeninng? 3) fix the problem?
I've pasted event log entries below:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 7/3/2009
Time: 10:00:14 AM
User: NT AUTHORITY\SYSTEM
Computer: NTSERVER
Description:
Logon Failure:
Reason: An error occurred during logon
User Name: Deanna
Domain: BEALEPRO
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -
Status code: 0xC00002EE
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 6/29/2009
Time: 5:28:20 AM
User: NT AUTHORITY\SYSTEM
Computer: NTSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: info
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_P
ACKAGE_V1_
0
Workstation Name: NTSERVER
Caller User Name: NTSERVER$
Caller Domain: BEALEPRO
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1860
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 7/1/2009
Time: 12:46:05 AM
User: NT AUTHORITY\SYSTEM
Computer: NTSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: adminprog
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_P
ACKAGE_V1_
0
Workstation Name: NTSERVER
Caller User Name: NTSERVER$
Caller Domain: BEALEPRO
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1860
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 6/29/2009
Time: 5:28:08 AM
User: NT AUTHORITY\SYSTEM
Computer: NTSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: admin
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_P
ACKAGE_V1_
0
Workstation Name: NTSERVER
Caller User Name: NTSERVER$
Caller Domain: BEALEPRO
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1860
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 6/29/2009
Time: 5:28:11 AM
User: NT AUTHORITY\SYSTEM
Computer: NTSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: test
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_P
ACKAGE_V1_
0
Workstation Name: NTSERVER
Caller User Name: NTSERVER$
Caller Domain: BEALEPRO
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1860
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.