The most recent content from our members.
We are getting Event ID failed logons that appear to be coming from SWJobEngineWorker2.exe. I have checked the credential libraries in NPM and SAM, as well as confirmed that the service is configured to logon as Local System.
On multiple servers we're seeing thousands of logon failures (Event ID 4625) 46coming from out Solarwinds server. Each server is hit every 10-20 minutes, and the account name is the name of the server with a '$' added to the end. Full log is below. We've checked the credentials in both NPM and SAM, and can't find these…
It looks like you're new here. Sign in or register to get started.