We have been getting this error message for some time now on our Windows 2003 domain controllers:
Oct 23 12:10:29 nneml001
Security: 529: NT AUTHORITY\SYSTEM: Logon Failure: Reason: Unknown user name or bad password
User Name: master
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: NNEML001
Caller User Name: NNEML001$
Caller Domain: NNHCORP
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1332
Transited Services: -
Source Network Address: -
Source Port: -
It references a user account called "master" on our Exchange 2003 server, but this account does not now and has never existed either locally or in Active Directory. I've checked all the services on the server and poked all through Exchange System Manager. I can find no reference to an account called "master".
I have also searched through the registry on the Exchange server, and can find no reference to the username "master".
There are no other symptoms that I can find that seem to be related to this message, either.
I'm completely stumped. Any help is appreciated.