I have 3 users out of about 70 on our Windows 2000 domain that continually get knocked off the network. I have a mixed environment of 98, 2000 and xp machines; these 3 have 98. My other 98 users are not having problems. I have more than enough CAL’s (I had been told that 2000 and xp machines would bounce a 98 if enough licenses weren’t available). On one of the users I swapped out the network card and physically moved the machine to rule out the cabling. They log in just fine at the beginning of the day, but while connected, they may try to open, print or save to the network and can’t get to the network folders and have to reboot. My security event logs are full of these event ids for these 3 users everyday. Any suggestions/ideas?
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 3/9/2004
Time: 12:18:21 PM
User: NT AUTHORITY\SYSTEM
Computer: WHO-SERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: AHENDERSON
Domain: WHO-GB
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: \\ALISA_PIII