Event ID: 539 Logon Type 2 , logon process:Advapi cause ID locked


dear guys.

i have sms server. windows server 2003 r2 sp2

i found lot of same event on server.

all these logs include below same information:

1. logon type :2

2.  logon process : advapi.

these caused id locked .

see the  log.

====================================================

event type: failure audit
event source: security
event category: logon/logoff
event id: 539
date:  7/6/2012
time:  4:57:52 pm
user:  nt authority\system
computer: labchnsms01
description:
logon failure:
  reason:  account locked out
  user name: monitoradmin
  domain: ap1
  logon type: 2
  logon process: advapi 
  authentication package: negotiate
  workstation name: labchnsms01
  caller user name: system
  caller domain: nt authority
  caller logon id: (0x3,0x191a3ea)
  caller process id: 99508
  transited services: -
  source network address: -
  source port: -

=================================================

who can tell me how resolve it?

process id 99508 smsexec.exe.

these may help.

http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=18465

http://technet.microsoft.com/en-us/library/cc738772(ws.10).aspx

 

 

 


regards, dave patrick ....
microsoft certified professional
microsoft mvp [windows]

disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.



Windows Server  >  Server Manager



Comments

Popular posts from this blog

directory stack

After enabling Windows Server 2012 R2 DHCP Failover Getting Packet dropped because of Client ID hash mismatch

WMI Repository 4GB limit - Win 2003 Ent Question