Solved

Can I ignore event 537 if it occurs just before shutdown...

Posted on 2008-10-29
1
443 Views
Last Modified: 2012-05-05
Hi

I've received a few Failure Audit errors in my Security event log. The contents of the entry are:

Logon Failure:
       Reason:      An error occurred during logon
       User Name:      MYSERVERNAME$
       Domain:      MYDOMAINNAME.LOCAL
       Logon Type:      3
       Logon Process:      Kerberos
       Authentication Package:      Kerberos
       Workstation Name:      -
       Status code:      0xC00000DC
       Substatus code:      0x0
       Caller User Name:      -
       Caller Domain:      -
       Caller Logon ID:      -
       Caller Process ID:      -
       Transited Services:      -
       Source Network Address:      -
       Source Port:      -
I have only seen this event logged just prior to event ID 513 (Windows is shutting down) being logged. The shutdowns were initiated by me, so they were planned.

I'm just wondering if this is a  "timing" type of thing since this is SBS and it's all-in-one offering (like with error 4015 in the DNS log which occurs when I do a shutdown). Since error code 0xC00000DC is STATUS_INVALID_SERVER_STATE it would seem to me to be related to the shutdown.

Just want to know if I can safely ignore these events given when they occurred.

Thank you.
0
Comment
Question by:emgee11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 24

Accepted Solution

by:
andrew_aj1 earned 125 total points
ID: 22831925
If this only happens durring shutdown it should not be an issue to worry about.
I hope this helps. Good luck.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question