Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 393
  • Last Modified:

"Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. [CLIENT: IP Address]

I have ArcServe backup database running on a separate database server running SQL Server 2005. On the event log of the database server I get "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. [CLIENT: IP Address]" message every 2 mintues. I don't know what the source of this Login Audit failure is, please help.
0
iso_more
Asked:
iso_more
  • 3
  • 2
1 Solution
 
Racim BOUDJAKDJIDatabase Architect - Dba - Data ScientistCommented:
That's because the login account on which Arc Serve runs is not recognized on SQL Server as known login...See if the proper rights are assigned at server level...
0
 
iso_moreAuthor Commented:
Thanks Racimo
ArcServe is using a dedicated domain account in the network which has access permission in the database and all the ArsServe funtionality works fine. When I do a trace of the execution the "NT AUTHORITY\ANONYMOUS LOGON" account is trying to access the ArcServe database but I don't know why the account is trying to access the database since ArsServe is not using it and ofcouse it doesn't have a permission to access the database.
0
 
Racim BOUDJAKDJIDatabase Architect - Dba - Data ScientistCommented:
Have you identified the host client that's performing the lgin attempts(you may get it by using profiler as well)?  Sounds like a virus.

0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
iso_moreAuthor Commented:
Hi Racimo
Yes, the host client is a server where the ArcServe application is installed and the database is installed on a separate database server and it is on the database server that I get this auit error message.
What I don't understand is that the 'NT AUTHORITY\ANONYMOUS LOGON' is not used anywhere in the network, not in the arcserve or the database server.
0
 
Racim BOUDJAKDJIDatabase Architect - Dba - Data ScientistCommented:
It may be an agent or service you are not aware of trying to connect.
0
 
Computer101Commented:
PAQed with no points refunded (of 250)

Computer101
EE Admin
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now