Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

NT AUTHORITY\SYSTEM,Logon Failure, how can I fix this

Posted on 2004-04-14
7
1,222 Views
Last Modified: 2013-12-04
NT AUTHORITY\SYSTEM,Logon Failure shows up under Event ID 537.  How can I address this event so it doesn't happen again?

Thanks.
0
Comment
Question by:g000se
  • 4
  • 3
7 Comments
 
LVL 84

Expert Comment

by:oBdA
ID: 10826493
You're a bit sparse with information here. When does that error show up? On which Windows version(s) does it show up? What is the exact error text in the event viewer?
0
 
LVL 11

Author Comment

by:g000se
ID: 10827693
Sorry about that.  Windows 2000 server, service pak 4.  

537,AUDIT FAILURE,Security,Thu Apr 08 12:37:28 2004,NT AUTHORITY\SYSTEM,Logon Failure:     Reason:  An unexpected error occurred during logon     User Name:      Domain:       Logon Type: 3     Logon Process: Kerberos     Authentication Package: Kerberos     Workstation Name: -  

Thanks for your help.
0
 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 10828084
At which occasions does this error occur, and is there anything else running on that machine (Exchange, IIS, ...)?
I'm afraid I have no real ideas at the moment; check out those maybe:

Event ID: 537
http://www.eventid.net/display.asp?eventid=537&eventno=194&source=Security&phase=1

Active directory logon/logoff problem
http:Q_20727539.html
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 11

Author Comment

by:g000se
ID: 10834974
The server is a DC, with Wins secondary, dhcp, and global catalog, file and print sharing as well.
0
 
LVL 11

Author Comment

by:g000se
ID: 10835960
Thanks for the link.  It has been very useful.
0
 
LVL 84

Expert Comment

by:oBdA
ID: 10837564
Glad you could solve it with the bit of information I was able to provide; may I ask what the problem was?
0
 
LVL 11

Author Comment

by:g000se
ID: 10891685
The link to the eventID.net  helped me to better troubleshoot the issue, because users were prompted to change their passwords.  :)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question