Craig_hannagan
asked on
Event ID: 4625 (Security - Audit Failure) on Server 2008 SP1 Enterprise with Exchange 2007 SP1
Hi,
I have just installed Server 2008 SP1 Enterprise with Exchange 2007 SP1 installed on it. Since I have installed Exchange on the Server the below error appears in the Security Event Log every 30 seconds. I have copied details of the event error below.
Does anyone have any ideas as to how to fix this problem. I have found minimal solutions to this problem on the Internet, but the little I have found is that many have said they reinstalled their OS and Exchange and the error did not appear anymore. I dont want to go down this path unless I really really have to. Any suggestions would be GREATLY appreciated.
SVRES is the name of the Server.
Thanks
Craig
--------------------------
An account failed to log on.
Subject:
Security ID: SYSTEM
Account Name: SVRES$
Account Domain: MSC
Logon ID: 0x3e7
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: SVRES$
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x9d0
Caller Process Name: D:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Excha
Network Information:
Workstation Name: SVRES
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
I have just installed Server 2008 SP1 Enterprise with Exchange 2007 SP1 installed on it. Since I have installed Exchange on the Server the below error appears in the Security Event Log every 30 seconds. I have copied details of the event error below.
Does anyone have any ideas as to how to fix this problem. I have found minimal solutions to this problem on the Internet, but the little I have found is that many have said they reinstalled their OS and Exchange and the error did not appear anymore. I dont want to go down this path unless I really really have to. Any suggestions would be GREATLY appreciated.
SVRES is the name of the Server.
Thanks
Craig
--------------------------
An account failed to log on.
Subject:
Security ID: SYSTEM
Account Name: SVRES$
Account Domain: MSC
Logon ID: 0x3e7
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: SVRES$
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x9d0
Caller Process Name: D:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Excha
Network Information:
Workstation Name: SVRES
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I installed Exchange Rollup Update 4. That did the trick. Problem resolved. Thanks for your response.
Cheers Craig