Event ID: 529 and Event ID: 537

I see the following logged on the security log of an xp system.      

Event ID: 529
Logon Failure
Reason: Unknown user name or bad password.
User Name: 1A
Domain: Joejj21~Bcd
Logon Type: 2
logon Process:
Authentication Package: Negotiate
Workstation Name: XPSystem

It appears to me that the domain user is logging on to this system typing the password together with the username.

I am puzzled as to why I would see Joejj21~Bcd in the Domain field instead of our domain name.  Is someone trying to access another domain or is this a bug in Microsoft?

Ive seen where one of our users types their username and password together but this shows up on the User Name field not on the Domain field.

I hope you can help me with this.

I also see Event ID 537 with the same User Name: 1A and Domain: Joejj21~Bcd when Event ID 529 occurred.

Thanks&&.
katmgAsked:
Who is Participating?
 
McKnifeCommented:
Hi, I'm back from a long journey - sorry, no idea.
0
 
McKnifeCommented:
Joejj21~Bcd - is that the computer name maybe? That would be called the local domain.
0
 
katmgAuthor Commented:
No.  For example, Joej will be the user name and j21~Bcd would seem to be the password.  It would not be the name of the workstation nor the name of our domain.
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
katmgAuthor Commented:
Apparently, one of our users was login in from a workstation with her domain account and accidentally entered her password together with her user name on the User Name field ex. Joejj21~Bcd.  Why would Joejj21~Bcd show up on the Domain field?

Thanks.......
0
 
katmgAuthor Commented:
Why would Joejj21~Bcd show up on the Domain field?  I have not gotten a reply on this question.  If you can help, I would really appreciate it.  If not, let me know and I will remove it.

Thanks.......
Katmg
0
 
katmgAuthor Commented:
Did not know the answer to my problem.
0
 
katmgAuthor Commented:
No answer to this question.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.