troubleshooting Question

Mulitple Events in Event Viewer

Avatar of Juneaucounty
JuneaucountyFlag for United States of America asked on
SoftwareApache Web ServerSecurityMicrosoft 365Active Directory
10 Comments1 Solution86 ViewsLast Modified:
In Even Viewer we are seeing a ton of events like the example below.  There are 20 or more a second.  We are trying to find out where they are coming from and how to stop them.  Any ideas and what else we can do?  Is there software out there that would help us in looking for info on these?  One of the things that is throwing us off is the username changes on every one of the events.  

- System

  - Provider

   [ Name]  Microsoft-Windows-Security-Auditing
   [ Guid]  {54849625-5478-4994-A5BA-3E3B0328C30D}
 
   EventID 4776
 
   Version 0
 
   Level 0
 
   Task 14336
 
   Opcode 0
 
   Keywords 0x8010000000000000
 
  - TimeCreated

   [ SystemTime]  2020-04-29T12:35:59.662914700Z
 
   EventRecordID 168057449
 
   Correlation
 
  - Execution

   [ ProcessID]  704
   [ ThreadID]  9872
 
   Channel Security
 
   Computer
 
   Security
 

- EventData

  PackageName MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  TargetUserName tomcat
  Workstation  
  Status 0xc0000064
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 10 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros