• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 634
  • Last Modified:

Event ID: 529 and Event ID: 537

I see the following logged on the security log of an xp system.      

Event ID: 529
Logon Failure
Reason: Unknown user name or bad password.
User Name: 1A
Domain: Joejj21~Bcd
Logon Type: 2
logon Process:
Authentication Package: Negotiate
Workstation Name: XPSystem

It appears to me that the domain user is logging on to this system typing the password together with the username.

I am puzzled as to why I would see Joejj21~Bcd in the Domain field instead of our domain name.  Is someone trying to access another domain or is this a bug in Microsoft?

Ive seen where one of our users types their username and password together but this shows up on the User Name field not on the Domain field.

I hope you can help me with this.

I also see Event ID 537 with the same User Name: 1A and Domain: Joejj21~Bcd when Event ID 529 occurred.

Thanks&&.
0
katmg
Asked:
katmg
  • 5
  • 2
1 Solution
 
McKnifeCommented:
Joejj21~Bcd - is that the computer name maybe? That would be called the local domain.
0
 
katmgAuthor Commented:
No.  For example, Joej will be the user name and j21~Bcd would seem to be the password.  It would not be the name of the workstation nor the name of our domain.
0
 
katmgAuthor Commented:
Apparently, one of our users was login in from a workstation with her domain account and accidentally entered her password together with her user name on the User Name field ex. Joejj21~Bcd.  Why would Joejj21~Bcd show up on the Domain field?

Thanks.......
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
katmgAuthor Commented:
Why would Joejj21~Bcd show up on the Domain field?  I have not gotten a reply on this question.  If you can help, I would really appreciate it.  If not, let me know and I will remove it.

Thanks.......
Katmg
0
 
McKnifeCommented:
Hi, I'm back from a long journey - sorry, no idea.
0
 
katmgAuthor Commented:
Did not know the answer to my problem.
0
 
katmgAuthor Commented:
No answer to this question.
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now