Welcome to WinForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Event Viewer Failure Audit messages under Security

 
   Windows XP (Home) -> XP Security Admin RSS
Next:  pop up message install.exe  
Author Message
Pete

External


Since: Mar 13, 2006
Posts: 38



(Msg. 1) Posted: Sat Feb 03, 2007 5:21 pm
Post subject: Event Viewer Failure Audit messages under Security
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

I finally started looking at the Event Viewer on my XP Pro SP2 system. I
found three Failure Audit messages under Security over and over again, I
assume during reboot. Using Search, I found the files advapi32.dll in
Windows/system32 and advapi32.class in com/ms/win32 (is that the registry?).
Will someone please give me a URL that explains these error messages? Thanks.

MESSAGE #1
IPSec Services failed to get the complete list of network interfaces on the
machine. This can be a potential security hazard to the machine since some of
the network interfaces may not get the protection as desired by the applied
IPSec filters. Please run IPSec monitor snap-in to further diagnose the
problem.

MESSAGE #2
Logon Failure:
Reason: Unknown user name or bad password
User Name: Pete
Domain: OFFICE
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate

MESSAGE #3
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Pete
Source Workstation: OFFICE
Error Code: 0xC000006A

--


Pete

 >> Stay informed about: Event Viewer Failure Audit messages under Security 
Back to top
Login to vote
Wesley Vogel

External


Since: Feb 23, 2004
Posts: 2979



(Msg. 2) Posted: Sun Feb 04, 2007 7:33 am
Post subject: Re: Event Viewer Failure Audit messages under Security [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

You need to have the Event ID & the Event Source. Microsoft product: --All
Products-- is usually good enough. Be careful when scrolling down in the
page so that Microsoft product: doesn't change on you.

To view Windows XP Events and Errors, type the Source (for example, Print)
and/or the Event code (for example, 20) into the ID field, then click the Go
button. Source and Event codes may be found in the Event Viewer logs.

Events And Errors Message Center: Advanced Search
http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

Events And Errors Message Center: Basic Search
http://www.microsoft.com/technet/support/ee/ee_basic.aspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:115AE857-60B9-4115-A671-4D3D2FD84600@microsoft.com,
Pete hunted and pecked:
> I finally started looking at the Event Viewer on my XP Pro SP2 system. I
> found three Failure Audit messages under Security over and over again, I
> assume during reboot. Using Search, I found the files advapi32.dll in
> Windows/system32 and advapi32.class in com/ms/win32 (is that the
> registry?). Will someone please give me a URL that explains these error
> messages? Thanks.
>
> MESSAGE #1
> IPSec Services failed to get the complete list of network interfaces on
> the machine. This can be a potential security hazard to the machine since
> some of the network interfaces may not get the protection as desired by
> the applied IPSec filters. Please run IPSec monitor snap-in to further
> diagnose the problem.
>
> MESSAGE #2
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: Pete
> Domain: OFFICE
> Logon Type: 2
> Logon Process: Advapi
> Authentication Package: Negotiate
>
> MESSAGE #3
> Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Logon account: Pete
> Source Workstation: OFFICE
> Error Code: 0xC000006A
>
> --
>
>
> Pete

 >> Stay informed about: Event Viewer Failure Audit messages under Security 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
"Failure Audit" Message in Event Viewer - I have a wireless router (D-Link DI-624) which is fine. I'm running XP Home on 5 networked computers. All are OK except one. I started to receive the message shown below on 2/3/07. It appears in the Event Viewer logs under Security This is a wireless...

Event Viewer Security logs - I have recently noticed on my computers security log that other user and computers have failed to logon to my computer. Does this mean that they are trying to get into my system or that their computer might be compromised and someone is trying to hac...

Rights necessary for an user to view the security logs wit.. - We have Windows XP Pro Service Pack 2 on our domain. We would like our regular domain users and these users would be in the local User group on the Windows XP Pro Service Pack 2 client. What are the minimum rights they would need to view the..

Event Log/success/failur audit - Hello, I set this windows XP Pro machine up for Remote access. I enable success/failure auditing. This is only for one person. So my question is, when i look at the failure audits. why do i see these other machines on my network trying to access thi...

WinXP SP2 Want Audit Event Generated on Service Creation - WinXP SP2 Want Audit Event Generated on Service Creation Anyone know the best practice for monitoring WinXP systems for the creation or additon of new services. I have not been able to identify a configuration option for it. Currently my method is t...
   Windows XP (Home) -> XP Security Admin All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
  Windows XP
 Windows Vista!
 Win 2000/NT/98/ME


[ Contact us | Terms of Service/Privacy Policy ]