My administrator account keeps loggin out. By reviewing my CD logs, I've
found it is coming from one of my servers, see log entry below. However, I
can't find exactly what on this machine is causing this or where it is coming
from. I have checked Scheduled Tasks, Services, IIS virtual directories and
security tabs, etc.. Am I missing something? Are there any tools or
utilities I can use to narrow track this down??
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 2/6/2006
Time: 8:55:54 AM
User: NT AUTHORITY\SYSTEM
Computer: SERVER1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: administrator
Domain: domain1
Logon Type: 2
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVER1