Solved

Event 529

Posted on 2002-06-17
4
488 Views
Last Modified: 2013-12-28
The event shows up like the following:
Event ID: 529
Source: Security
Type: Failure Audit
Category:  Logon/Logoff
User: NT AUTHORITY\SYSTE

Description:
Logon Failure:
  Reason:  Unknown user name or bad password
  User Name:  randyb
  Domain:  Snoopy
  Logon Type:  2
  Logon Process:  IIS
  Authentication Package:  MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name:  Snoopy1

Snoopy1 is the server name.  We don't have a user name as randyb in our domain.  I can track down the ip address of randyb.  Here's the problem:
Our IT department believes that a "spidering technology" such as AskJeeves is indexing our servers.  I think that it is a hacker using a password cracker against us.  Can an indexing situation cause a 529 event id error?  If not, how is randyb trying to get into our servers so that I can stop him?  This is a NT 4 box.  Randyb is a remote user that isn't a domain user of ours.
0
Comment
Question by:ninja11
4 Comments
 
LVL 1

Accepted Solution

by:
luvshak earned 100 total points
ID: 7096652
Hi,

Try the below links:

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q172402 (This one talks about Event 529)

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q182918 (This is a continue of above link)

This hopefully will answer your question.
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question