<div>
Something is trying to logon with an incorrect password. 0xC0000234 indicates an account lockout. Is it possible you have Blackberry or Windows based phones trying to logon, and the user has had a password change?
</div>


Something is trying to logon with an incorrect password. 0xC0000234 indicates an account lockout. Is it possible you have Blackberry or Windows based phones trying to logon, and the user has had a password change?

<div>
<div class="content wysiwyg-content">
These are on my securty event logs - is someone trying to gain access not authorized?<br />
<br />
Event Type: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Failure Audit<br />
Event Source: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Security<br />
Event Category: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Account Logon <br />
Event ID: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;680<br />
Date: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;12/21/2009<br />
Time: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1:51:38 PM<br />
User: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NT AUTHORITY\SYSTEM<br />
Computer: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;XYSRVR1<br />
Description:<br />
Logon attempt by: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MICROSOFT_AUTHENTICATION_P<wbr />ACKAGE_V1_<wbr />0<br />
&nbsp;Logon account: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;krbtgt<br />
&nbsp;Source Workstation: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\NTscan<br />
&nbsp;Error Code: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0xC0000234<br />
For more information, see Help and Support Center at <a href="http://go.microsoft.com/fwlink/events.asp" rel="ugc">http://go.microsoft.com/fwlink/events.asp</a>.
</div>
</div>


These are on my securty event logs - is someone trying to gain access not authorized?

Event Type:	                        Failure Audit
Event Source:	Security
Event Category:	Account Logon 
Event ID:	                         680
Date:		12/21/2009
Time:		1:51:38 PM
User:		NT AUTHORITY\SYSTEM
Computer:	                         XYSRVR1
Description:
Logon attempt by:	MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:	krbtgt
 Source Workstation:	\\NTscan
 Error Code:	0xC0000234
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

LOGON Failures

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.