Lots of Failure Alerts on my DC
Posted
by
Param
on Server Fault
See other posts from Server Fault
or by Param
Published on 2012-12-01T06:08:37Z
Indexed on
2012/12/01
11:08 UTC
Read the original article
Hit count: 147
I am receiving lots of Failure Audit logs on my DC, can you guide me - how should i identify the culprit.
Please see the below print-screen for more detail. The logon type is 3, that means it is a network logon. I have identify the Workstation from the log, but how should i prove who or which process is sending broadcast with logon authentication to my DC. The Anti-virus is also updated.
Note:- The Workstation is in Workgroup.
© Server Fault or respective owner