Solved

Event 529

Posted on 2002-06-17
4
489 Views
Last Modified: 2013-12-28
The event shows up like the following:
Event ID: 529
Source: Security
Type: Failure Audit
Category:  Logon/Logoff
User: NT AUTHORITY\SYSTE

Description:
Logon Failure:
  Reason:  Unknown user name or bad password
  User Name:  randyb
  Domain:  Snoopy
  Logon Type:  2
  Logon Process:  IIS
  Authentication Package:  MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name:  Snoopy1

Snoopy1 is the server name.  We don't have a user name as randyb in our domain.  I can track down the ip address of randyb.  Here's the problem:
Our IT department believes that a "spidering technology" such as AskJeeves is indexing our servers.  I think that it is a hacker using a password cracker against us.  Can an indexing situation cause a 529 event id error?  If not, how is randyb trying to get into our servers so that I can stop him?  This is a NT 4 box.  Randyb is a remote user that isn't a domain user of ours.
0
Comment
Question by:ninja11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 1

Accepted Solution

by:
luvshak earned 100 total points
ID: 7096652
Hi,

Try the below links:

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q172402 (This one talks about Event 529)

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q182918 (This is a continue of above link)

This hopefully will answer your question.
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question