• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1337
  • Last Modified:

Getting multiple event id 4776 messages after upgrading to 2008 r2 DC'S with 2003 dc's present

getting the event below. i think this is also causing accounts to lock out.

WS1100 is the sophos proxy appliace used for internet access.


The computer attempted to validate the credentials for an account.

Authentication Package:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account:      
Source Workstation:      \\WS1100
Error Code:      0xc0000064
0
Nsingh007
Asked:
Nsingh007
  • 3
1 Solution
 
Nsingh007Author Commented:
also these accounts are locking out SystemMailbox{3BA7A037-C31E-46FE-B9DF-C23999926655}, SMEX_BECZAPE101_MB
iwam , iusr
0
 
rpasseroCommented:
C0000064 = invalid username

Check your proxy config, is it possible there something configured on your proxy server attempting to authenticate to your domain with a user that doesn't exist?
0
 
Nsingh007Author Commented:
problem was on the sophos proxy , had to re sync
0
 
Nsingh007Author Commented:
consulted with the Sophos experts
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now