G'day,
I am seeing this event every 10 seconds in the security event log on our vCenter Server system:
-----
An account failed to log on.
Subject:
Security ID: ELECTRO\-vCenter
Account Name: -vCenter
Account Domain: ELECTRO
Logon ID: 0x21a39
Logon Type: 2
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: TimR
Account Domain: ELECTRO
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a
Process Information:
Caller Process ID: 0x850
Caller Process Name: C:\Program Files\VMware\Infrastructure\VirtualCenter Server\vpxd.exe
Network Information:
Workstation Name: SVR-VCTR01
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
-----
Is this behavior by design or what can I do to correct this?
Thanks,
Tim