?
Solved

Can I ignore event 537 if it occurs just before shutdown...

Posted on 2008-10-29
1
Medium Priority
?
445 Views
Last Modified: 2012-05-05
Hi

I've received a few Failure Audit errors in my Security event log. The contents of the entry are:

Logon Failure:
       Reason:      An error occurred during logon
       User Name:      MYSERVERNAME$
       Domain:      MYDOMAINNAME.LOCAL
       Logon Type:      3
       Logon Process:      Kerberos
       Authentication Package:      Kerberos
       Workstation Name:      -
       Status code:      0xC00000DC
       Substatus code:      0x0
       Caller User Name:      -
       Caller Domain:      -
       Caller Logon ID:      -
       Caller Process ID:      -
       Transited Services:      -
       Source Network Address:      -
       Source Port:      -
I have only seen this event logged just prior to event ID 513 (Windows is shutting down) being logged. The shutdowns were initiated by me, so they were planned.

I'm just wondering if this is a  "timing" type of thing since this is SBS and it's all-in-one offering (like with error 4015 in the DNS log which occurs when I do a shutdown). Since error code 0xC00000DC is STATUS_INVALID_SERVER_STATE it would seem to me to be related to the shutdown.

Just want to know if I can safely ignore these events given when they occurred.

Thank you.
0
Comment
Question by:emgee11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 24

Accepted Solution

by:
andrew_aj1 earned 375 total points
ID: 22831925
If this only happens durring shutdown it should not be an issue to worry about.
I hope this helps. Good luck.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question