Solved

Event ID 675 what service it belongs too?

Posted on 2011-03-07
3
370 Views
Last Modified: 2012-05-11
I keep getting Event ID 675 pre-authentication errors for the administrator account. I went to the server that the event appeared on to try and figure out what process or program was creating the event ID and wasn’t able to find it nor on the windows AD server either. I looked in the services to see if that account was being used for anything (services) and it wasn’t. So I guessed and turned the applications services off for a night and whaalaaa i guessed right. That’s basically the issue I had to guess. Is there anything I didn’t try that would have aided me to resolving this pre-authentication error particularly what service in was binds to?

**changed detail to protect the innocent***
Security Event ID# 675

Pre-authentication failed:
User Name: administrator
User ID: contoso\administrator
Service Name: krbtgt/contoso
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: x.x.x.x
0
Comment
Question by:Roodona
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
ChiefTechGuru earned 500 total points
ID: 35060206
For Event Viewer entries, using www.eventid.net is invaluable.  Just put in the event code (and the event source, optionally), and you'll get information from other people that have experienced similar issues.  Info for your particular event can be found here.
0
 

Author Comment

by:Roodona
ID: 35108421
Thank you for the link, thas helpful. However, the problem im having isnt why im getting the ID but the luck of information it provides as far as what process is using the administrator account and "failing to logon".
Like I said I went to the services area on the server and disabled anything running under the adminstrator account but that didnt seem to work.
0
 

Author Closing Comment

by:Roodona
ID: 35140839
My logs arent telling me what process keeps authenticating I know what the error is. The site recommendation was awsome though.
0

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Smart phones, smart watches, Bluetooth-connected devices—the IoT is all around us. In this article, we take a look at the security implications of our highly connected world.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question