asked on

Security Log Failed Audit Event ID 557 10 to 20 times a day...

Anyone know how to fix this??

Privileged Service Called:
     Server:            Security
     Service:            -
     Primary User Name:      rr
     Primary Domain:      HLF
     Primary Logon ID:      (0x0,0x30EDE)
     Client User Name:      -
     Client Domain:      -
     Client Logon ID:      -
     Privileges:      SeTcbPrivilege

AND

Privileged Service Called:
     Server:            Security
     Service:            -
     Primary User Name:      rr
     Primary Domain:      HLF
     Primary Logon ID:      (0x0,0x126F344)
     Client User Name:      -
     Client Domain:      -
     Client Logon ID:      -
     Privileges:      SeSecurityPrivilege

For more information, see Help and Support Center at

kmart

This may not be of much help, but try: When trying to troubleshoot a connection failure and the failurereason isnt descriptive enough, search the log file(%windir%\oakley.log) for the description string in the audit. Makesure you match the filter and mode if you are on a machine doing manynegotiations to make sure you are in the right spot in the log.Determine from the log where the failure occurred that generated thisaudit. This should give a clue as to what is actually happening. Based on your current sample it is evident that this should be some type of IPSec or IKSec based error.

ASKER CERTIFIED SOLUTION

Jonvee

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Jonvee

There's reference to a similar message here. It's not conclusive but you may be interested in the comments from Roger Abell, a Microsoft MVP >

http://www.pcreview.co.uk/forums/thread-168421.php