?
Solved

Pre-authetication Failed Username Administrator event code 675

Posted on 2014-12-29
9
Medium Priority
?
188 Views
Last Modified: 2014-12-29
I recently installed EIQ event monitoring and I see this a lot. One of them is used for monitoring the other is a WSUS server. See attached file. Would this work? https://social.technet.microsoft.com/Forums/windowsserver/en-US/4db3bb1a-5cdf-4874-b58f-f3cbba0ea80a/eventid-675-failure-code-0x19-windows-server-2003-as-dc-windows-server-2008-as-member-server?forum=winserversecurity
qie.png
0
Comment
Question by:stlhost
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 40521876
0
 
LVL 2

Author Comment

by:stlhost
ID: 40521901
I need a way to squelch the message if possible, Management who reviews these logs is convinced something is wrong, despite what Microsoft documentation says.
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 40521903
Do you use Symantec Backup Exec ?
0
Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

 
LVL 2

Author Comment

by:stlhost
ID: 40521905
Yes. It is not installed on any of these machines though, or the remote agent.
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 40521914
All Servers are 2008? R2?
And all Clients are Win 7? Do you have Vista or Win XP?
0
 
LVL 2

Author Comment

by:stlhost
ID: 40521920
All servers are mixed. Domain controllers are windows 2003, the rest is 2008 R2 or just standard. All workstations are windows 7 professional 64 bit.
0
 
LVL 19

Accepted Solution

by:
*** Hopeleonie *** earned 2000 total points
ID: 40521927
Is this a solution for you?

Stop Logging a Specific Event:
http://technet.microsoft.com/en-us/library/bb687437.aspx

Is it possible to hide the Event with EIQ event monitoring ?
0
 
LVL 2

Author Comment

by:stlhost
ID: 40521944
lol perfect. thanks
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 40521956
You are welcome! :-)
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question