Solved

Event ID 675 what service it belongs too?

Posted on 2011-03-07
3
369 Views
Last Modified: 2012-05-11
I keep getting Event ID 675 pre-authentication errors for the administrator account. I went to the server that the event appeared on to try and figure out what process or program was creating the event ID and wasn’t able to find it nor on the windows AD server either. I looked in the services to see if that account was being used for anything (services) and it wasn’t. So I guessed and turned the applications services off for a night and whaalaaa i guessed right. That’s basically the issue I had to guess. Is there anything I didn’t try that would have aided me to resolving this pre-authentication error particularly what service in was binds to?

**changed detail to protect the innocent***
Security Event ID# 675

Pre-authentication failed:
User Name: administrator
User ID: contoso\administrator
Service Name: krbtgt/contoso
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: x.x.x.x
0
Comment
Question by:Roodona
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
ChiefTechGuru earned 500 total points
ID: 35060206
For Event Viewer entries, using www.eventid.net is invaluable.  Just put in the event code (and the event source, optionally), and you'll get information from other people that have experienced similar issues.  Info for your particular event can be found here.
0
 

Author Comment

by:Roodona
ID: 35108421
Thank you for the link, thas helpful. However, the problem im having isnt why im getting the ID but the luck of information it provides as far as what process is using the administrator account and "failing to logon".
Like I said I went to the services area on the server and disabled anything running under the adminstrator account but that didnt seem to work.
0
 

Author Closing Comment

by:Roodona
ID: 35140839
My logs arent telling me what process keeps authenticating I know what the error is. The site recommendation was awsome though.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Palo Alto Networks - find the sec zone 3 64
save browser passwords 11 69
User account lockout - Server 2012R2 7 43
Home security 15 41
One of the biggest threats in the cyber realm pertains to advanced persistent threats (APTs). This paper is a compare and contrast of Russian and Chinese APT's.
Knowing where your website is hosted is as important as the features you receive, the monthly fee, and the support you receive. Due diligence should be done when choosing your next hosting provider.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question