I am seeing many Event ID: 534 not sure what is causing how can I find out the source IP address without running network monitor. What is the solution to this problem.
Thanks
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: 5/29/2007
Time: 2:03:28 PM
User: NT AUTHORITY\SYSTEM
Computer: “server”
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: “UserID”
Domain: “Domain”
Logon Type: 5
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: “Server”
Caller User Name: “UserID”
Caller Domain: “Domain”
Caller Logon ID: (0x0,0x48D344E3)
Caller Process ID: 20300
Transited Services: –
Source Network Address: –
Source Port: –
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.