cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Authentication Failed Logons

I've been getting a lot of User Logon Failure alerts for a few systems on my network that are trying log in with a disabled guest account. What could be the cause of this problem?

 

EventType: UserLogonFailure

EventInfo: Account "Guest" used for logon failed from "XXXXX-XXX"

ProviderSID: Microsoft-Windows-Security-Auditing 4776

ExtraneousInfo: Error Code: 0xc0000072 Error: account is currently disabled

DestinationAccount: Guest

AutPackage: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

FailureReason: account is currently disabled

0 Kudos
0 Replies