Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

failed logon every 15 minutes

I receive a failed logon every 15 minutes from the same user account. This user is out of site and it does not seem like an interactive logon. Any ideas?

Find more posts tagged with

Accepted answers

All comments

curtisi

What other information do you get? The logon type should be in the event details. Maybe a scripted task with bad credentials?

marcusmm8

authentication package MICROSOFT_AUTHENTICATION_PACKAGE_V1_0.

ProviderSID: 4776

failure reason: ErrorCode:0xc000006a (user name is correct but password is wrong).

No logon type present

curtisi

Looking at this:

Windows Security Log Event ID 4776 - The domain controller attempted to validate the credentials for an account

C000006A

user name is correct but the password is wrong

Maybe check the scheduled tasks on that workstation?

ecklerwr1

I'm getting these same events on an account that I know isn't being locked out... what gives? Anyone figured this out? I know the password can't be wrong because the account would lock if it tried this many times... so what gives? Is it possible the account doesn't have some rights for something it's trying to do? I've got the same ErrorCode:0xc000006a