Hi ,
i got a small network with some 40 and odd machines ,one DHCP server serving all these clients .
My question is whenever i see the event viewer security log it shows me that some log on attempts from client machines have failed .i cleared the security log and i can still see the same from other clients also attemting to log on and the process failed .
I have given the log file below with names changed for the clients and the server ..
———————————————
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 9/1/2003
Time: 10:37:13 AM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Client
Domain: Client2
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: Client2
—————–
Where SERVER is my Server machine and client2 is the client machine and the username of this machine is client..
The same happens from other machines also ..i dont what is the meaning of this and what it it trying to do and is it a problem ,if so what should i do to prevent this ..
waitng for ur answers
anantha