Security Event Log Error 680 constantly appearing

mlamartina
mlamartina used Ask the Experts™
on
Hello.  I'm running Exchange 2003 SP2.  Lately, I have noticed an Event ID 680 CONSTANTLY.  It's pretty much the only Failure Audit in my Security Event Log.  It looks like this:

Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: userName
Source Workstation: laptop01.ourDomainName.net
Error Code: 0xC0000064

There are two parts to this issue, but both are similar...

First, the person userName refers to is using a MAC.  However, the Mac they are using is not named laptop01.  The actual machine laptop01 hasn't been powered on in over 3 months.  So, why is this user constantly hammering the Exchange server with a bad machine name?

The second part to this is that the only other Mac user in the organization is also a cause of constant error 680's, but his machine name appears fine.

Obviously I have something screwed up in the setup for Macs and Exchange, but I don't know what.  As a result, I think our Exchange server is taking a speed hit as it seems to be running slow lately.  Any ideas?  Thank you for your help in advance!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
David Scott, MCSENetwork Administrator

Commented:
check out your dns and see if there is a bad entry in there (laptop01 pointing to that mac laptop).  if so delete it, then reload the zone and see what comes through.  

Author

Commented:
I did notice some duplicate IP's for this machine.  I deleted them and reloaded.  I'll let you know if they stop.  Thanks!

As for the second part - any idea why only the Mac machines are causing the 680's?

Author

Commented:
Oh!  I see!  Unless the Mac machines have the IP's of another machine already specified in DNS and the conflict is causing the audit failure...  Right?

I'll keep an eye on it.  Thanks!
Mike
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Network Administrator
Commented:
it could be i'm not familiar with macs in an windows network.  but i certainly think that deleted the bad dns entry should clear it up.  let me know how you make out

Author

Commented:
I'm sorry it's taken so long to respond to this.  Unfortunately, the errors continue.  :-(
David Scott, MCSENetwork Administrator

Commented:
you might get more help in the mac area.. may want to post there

Author

Commented:
Sounds good Opie6373.  Thank you for your time, patience, and help.  :-)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial