troubleshooting Question

Logon errors

Avatar of jeffsteffy
jeffsteffy asked on
Windows Server 2003Microsoft Forefront ISA Server
2 Comments2 Solutions421 ViewsLast Modified:
I am getting the following error serveral times per day:

EVENT # 1512
EVENT LOG Security
EVENT TYPE Audit Failure
SOURCE Security
CATEGORY Logon/Logoff
TIME 8/8/2008 5:45:00 AM
MESSAGE Logon Failure:
Reason: Unknown user name or bad password
User Name: aaa_
Domain: F
Logon Type: 4
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: -FS1
Caller User Name: -FS1$
Caller Domain: F
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1308
Transited Services: -
Source Network Address: -
Source Port: -

What does this mean, is it a process running or a hacker? How do i determine this?
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 2 Answers and 2 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros