I am using Spiceworks and it uses credentials on some devices to communicate to get information, there are so many devices with different credentials (WMI, HTTP, SSH, SNMP, etc). What it does is that it don't remember or save what device uses what credentials, let's say it communicates through WMI. It will start at the first credentials and keep trying till it finds the correct one. Now by doing this it triggers failed logons and these are captured in LEM, this is annoying because they are false positives and I would like to eleminate the Spiceworks IP or PC for triggering false warnings.
Any help would be appreciated.