Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Windows Event Log ID 675

Posted on 2008-11-13
1
Medium Priority
?
754 Views
Last Modified: 2012-05-05
When analyzing an event ID 675 log, is it normal to have the user name field reference a computer name followed by a dollar sign?  Is this normal?  Should I worry? Furthermore, is there any good literature/website out there that identifies all the event log IDs? Example:

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      675
Date:            9/30/2008
Time:            5:59:12 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER
Description:
Pre-authentication failed:
       User Name:      COMPUTER$
       User ID:            DOMAIN\COMPUTER$
       Service Name:      krbtgt/DOMAIN.COM
       Pre-Authentication Type:      0x2
       Failure Code:      0x18
       Client Address:      172.16.200.78


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:rodriguj79
1 Comment
 

Accepted Solution

by:
Experthead earned 150 total points
ID: 22953013
Yes it is normal for the user name field reference a computer name followed by a dollar sign.
Here is some detailed info on why it relates: http://msdn.microsoft.com/en-us/library/aa370254(VS.85).aspx
 Here is some info on the Audit 675 event error: http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2006-07/msg01377.html
 
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Integration Management Part 2
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question