qbbraveheart
Baseband Member
- Messages
- 85
at the moment at home I have a small office network setup
1 server, 2 desktops, a laptop, wireless router and cable modem.
I only had 1 of the desktops on and the laptop on...
I had my wife log onto her account on the desktop...which she hasnt logged onto in days and it says her account was locked out.
So I go in and unlock it and check the security logs
now right before she was on the desktop she was on the laptop surfing the net
heres the security log
Type Date Time Source Category Event User Computer
Failure Audit 5/4/2007 7:31:29 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:29 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:26 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:26 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:23 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:23 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:18 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:18 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:11 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:11 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:10 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:10 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:08 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:08 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:05 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:05 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:02 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:02 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:00 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:00 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:30:59 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:30:59 PM Security Account Logon 681
when I investigage further by checkin out the specifics and highlighting and clicking properties on the individual audits.....
The logon to account: Jillian
by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
from workstation: LAPTOP
failed. The error code was: 3221226036
and
Logon Failure:
Reason: Account locked out
User Name: Jillian
Domain: LAPTOP
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: LAPTOP
what is goin on?!?!
I dont have a clue
can someone please explain?
1 server, 2 desktops, a laptop, wireless router and cable modem.
I only had 1 of the desktops on and the laptop on...
I had my wife log onto her account on the desktop...which she hasnt logged onto in days and it says her account was locked out.
So I go in and unlock it and check the security logs
now right before she was on the desktop she was on the laptop surfing the net
heres the security log
Type Date Time Source Category Event User Computer
Failure Audit 5/4/2007 7:31:29 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:29 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:26 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:26 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:23 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:23 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:20 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:18 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:18 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:11 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:11 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:10 PM Security Logon/Logoff 539 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:10 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:08 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:08 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:05 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:05 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:02 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:02 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:00 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:31:00 PM Security Account Logon 681 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:30:59 PM Security Logon/Logoff 529 SYSTEM WIN2KPRO
Failure Audit 5/4/2007 7:30:59 PM Security Account Logon 681
when I investigage further by checkin out the specifics and highlighting and clicking properties on the individual audits.....
The logon to account: Jillian
by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
from workstation: LAPTOP
failed. The error code was: 3221226036
and
Logon Failure:
Reason: Account locked out
User Name: Jillian
Domain: LAPTOP
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: LAPTOP
what is goin on?!?!
I dont have a clue
can someone please explain?