Solved

Persistent connection attempt from unknown computer

Posted on 2008-09-30
5
430 Views
Last Modified: 2013-11-15
Every 4 hours (sometimes 4 hours 15 minutes) we are receiving event ID 5805 from NETLOGON with description:

The session setup from the computer COMMUNIC-431A3B failed to authenticate.  The following error occurred: Access is denied.

This has been happening for months, we have never had a computer on our network with that name (that we know of).    

Does anyone have any ideas on how to track down what computer on our network could be causing this event?

Thanks!
0
Comment
Question by:Links_Technology
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 11

Expert Comment

by:Jon Winterburn
ID: 22608829
If you ping COMMUNIC-431A3B, does it resolve to an IP? If so, then does it reply and if so, perhaps you can track it down. Is there any reference to COMMUNIC-431A3B in DNS or WINS or DHCP (wherever applicable)?
0
 

Author Comment

by:Links_Technology
ID: 22608965
We have nothing showing up in DNS, WINS, etc.  I can not currently ping it, I do not get an IP.  Whatever it is, it last attempted to connect at 12:56, so it's due to show up again around 4:56 today, so I'm going to try to ping it then.
0
 

Accepted Solution

by:
Links_Technology earned 0 total points
ID: 22609701
We found it.
0
 
LVL 11

Expert Comment

by:Jon Winterburn
ID: 22609765
Okay - what was it, how did you find it? Was it an employee's laptop or something?
0
 

Author Comment

by:Links_Technology
ID: 22609785
A computer we had on the network that hadn't been correctly joined to the domain, and we didn't realize that's what it was called.
0

Featured Post

Percona Live Europe 2017 | Sep 25 - 27, 2017

The Percona Live Open Source Database Conference Europe 2017 is the premier event for the diverse and active European open source database community, as well as businesses that develop and use open source database software.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question