Security

Ask something
Discussion Locked

Audit Failure / Exch POP3 Failure

0 helpful
1 reply

by Member 31019567

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

One of my NT 4 Wkstn machines is being logged in as local Administrator.The Machine is part of my Domain but i keep getting an Audit Failure in My Event Log on my Domain Controller which is a win2k Server.I think due to this even the Outlook ExpressClient on that machine is generating an event on my DC.
22-May-02 4:22:56 PM MSExchange Pop3 Interface Error Authentication 13004 N/A CBBPDC01
Logon attempt from 192.168.0.56 has failed: AcceptSecurityContext() call failed with error Access denied.
The Security Audit Log looks like this
18-May-02 1:11:57 AM Security Failure Audit Logon/Logoff 529 NT AUTHORITY\SYSTEM CBBPDC01 "Logon Failure:
Reason: Unknown user name or bad password
User Name:administrator
Domain: CBBTEL01
Logon Type:3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: CBBTEL01 "

can anyone help me out
thnks

1 reply

by chris lowe

Since the administrator account is not part of the domain, but is the local workstation domain, You need to (under the exchange admin mailbox general properties) change the NT account on the mailbox that the Pop3 session is attempting to access, to match the "cbbtel01\administrator" account that is logged on.

This discussion is closed to new replies.