Lots of Failure Alerts on my DC

Posted by Param on Server Fault See other posts from Server Fault or by Param
Published on 2012-12-01T06:08:37Z Indexed on 2012/12/01 11:08 UTC
Read the original article Hit count: 150

I am receiving lots of Failure Audit logs on my DC, can you guide me - how should i identify the culprit.

Please see the below print-screen for more detail. The logon type is 3, that means it is a network logon. I have identify the Workstation from the log, but how should i prove who or which process is sending broadcast with logon authentication to my DC. The Anti-virus is also updated.

Note:- The Workstation is in Workgroup.enter image description here

© Server Fault or respective owner

Related posts about Windows

Related posts about active-directory