• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 431
  • Last Modified:

Event ID 529 on SBS

I have a SBS2003 and Standard Server 2003 (Terminal Server) environment. Evnet log shows over 3500 occurances of event ID 529, with the following detail -

Reason:      Unknown user name or bad password
User Name:      admin
Domain:      SSR
Logon Type:      8
Logon Process:      IIS
Authentication Package:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name:      SSR-SVR1
Caller User Name:      SSR-SVR1$
Caller Domain:      SSR
Caller Logon ID:      (0x0,0x3E7)
Caller Process ID:      1764
Transited Services:      -
Source Network Address:      -
Source Port:      -

NB. SSR-SVR1 is the SBS. I have no non-standard IIS processes running, although I have configured an FTP site locally.

I generally find the myriad of things event 529 refers to confusing - can someone help explain how IIS can be attempting authentication this many times?

Thanks.
0
qtg
Asked:
qtg
1 Solution
 
qtgAuthor Commented:
Issue has not reocurred, but I have heeded the posts above (Administrator account does not lock after unsuccessful attempts). Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now