[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 456
  • Last Modified:

Persistent connection attempt from unknown computer

Every 4 hours (sometimes 4 hours 15 minutes) we are receiving event ID 5805 from NETLOGON with description:

The session setup from the computer COMMUNIC-431A3B failed to authenticate.  The following error occurred: Access is denied.

This has been happening for months, we have never had a computer on our network with that name (that we know of).    

Does anyone have any ideas on how to track down what computer on our network could be causing this event?

Thanks!
0
Links_Technology
Asked:
Links_Technology
  • 3
  • 2
1 Solution
 
Jon WinterburnCommented:
If you ping COMMUNIC-431A3B, does it resolve to an IP? If so, then does it reply and if so, perhaps you can track it down. Is there any reference to COMMUNIC-431A3B in DNS or WINS or DHCP (wherever applicable)?
0
 
Links_TechnologyAuthor Commented:
We have nothing showing up in DNS, WINS, etc.  I can not currently ping it, I do not get an IP.  Whatever it is, it last attempted to connect at 12:56, so it's due to show up again around 4:56 today, so I'm going to try to ping it then.
0
 
Links_TechnologyAuthor Commented:
We found it.
0
 
Jon WinterburnCommented:
Okay - what was it, how did you find it? Was it an employee's laptop or something?
0
 
Links_TechnologyAuthor Commented:
A computer we had on the network that hadn't been correctly joined to the domain, and we didn't realize that's what it was called.
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now