Solved

Event 529

Posted on 2002-06-17
4
486 Views
Last Modified: 2013-12-28
The event shows up like the following:
Event ID: 529
Source: Security
Type: Failure Audit
Category:  Logon/Logoff
User: NT AUTHORITY\SYSTE

Description:
Logon Failure:
  Reason:  Unknown user name or bad password
  User Name:  randyb
  Domain:  Snoopy
  Logon Type:  2
  Logon Process:  IIS
  Authentication Package:  MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name:  Snoopy1

Snoopy1 is the server name.  We don't have a user name as randyb in our domain.  I can track down the ip address of randyb.  Here's the problem:
Our IT department believes that a "spidering technology" such as AskJeeves is indexing our servers.  I think that it is a hacker using a password cracker against us.  Can an indexing situation cause a 529 event id error?  If not, how is randyb trying to get into our servers so that I can stop him?  This is a NT 4 box.  Randyb is a remote user that isn't a domain user of ours.
0
Comment
Question by:ninja11
4 Comments
 
LVL 1

Accepted Solution

by:
luvshak earned 100 total points
ID: 7096652
Hi,

Try the below links:

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q172402 (This one talks about Event 529)

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q182918 (This is a continue of above link)

This hopefully will answer your question.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
An article on effective troubleshooting
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now