Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Event ID 675 what service it belongs too?

Posted on 2011-03-07
3
Medium Priority
?
376 Views
Last Modified: 2012-05-11
I keep getting Event ID 675 pre-authentication errors for the administrator account. I went to the server that the event appeared on to try and figure out what process or program was creating the event ID and wasn’t able to find it nor on the windows AD server either. I looked in the services to see if that account was being used for anything (services) and it wasn’t. So I guessed and turned the applications services off for a night and whaalaaa i guessed right. That’s basically the issue I had to guess. Is there anything I didn’t try that would have aided me to resolving this pre-authentication error particularly what service in was binds to?

**changed detail to protect the innocent***
Security Event ID# 675

Pre-authentication failed:
User Name: administrator
User ID: contoso\administrator
Service Name: krbtgt/contoso
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: x.x.x.x
0
Comment
Question by:Roodona
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
ChiefTechGuru earned 1500 total points
ID: 35060206
For Event Viewer entries, using www.eventid.net is invaluable.  Just put in the event code (and the event source, optionally), and you'll get information from other people that have experienced similar issues.  Info for your particular event can be found here.
0
 

Author Comment

by:Roodona
ID: 35108421
Thank you for the link, thas helpful. However, the problem im having isnt why im getting the ID but the luck of information it provides as far as what process is using the administrator account and "failing to logon".
Like I said I went to the services area on the server and disabled anything running under the adminstrator account but that didnt seem to work.
0
 

Author Closing Comment

by:Roodona
ID: 35140839
My logs arent telling me what process keeps authenticating I know what the error is. The site recommendation was awsome though.
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the evolution of technology, we have finally reached a point where it is possible to have home automation features like having your thermostat turn up and door lock itself when you leave, as well as a complete home security system. This is a st…
What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question