Quantcast
Channel: VMware Communities : Discussion List - vCenter™ Server
Viewing all articles
Browse latest Browse all 6649

Audit Failure Security Event every 10 seconds from vpxd.exe

$
0
0

G'day,

 

I am seeing this event every 10 seconds in the security event log on our vCenter Server system:

-----

An account failed to log on.

 

Subject:

    Security ID:        ELECTRO\-vCenter

    Account Name:        -vCenter

    Account Domain:        ELECTRO

    Logon ID:        0x21a39

 

Logon Type:            2

 

Account For Which Logon Failed:

    Security ID:        NULL SID

    Account Name:        TimR

    Account Domain:        ELECTRO

 

Failure Information:

    Failure Reason:        Unknown user name or bad password.

    Status:            0xc000006d

    Sub Status:        0xc000006a

 

Process Information:

    Caller Process ID:    0x850

    Caller Process Name:    C:\Program Files\VMware\Infrastructure\VirtualCenter Server\vpxd.exe

 

Network Information:

    Workstation Name:    SVR-VCTR01

    Source Network Address:    -

    Source Port:        -

 

Detailed Authentication Information:

    Logon Process:        Advapi 

    Authentication Package:    Negotiate

    Transited Services:    -

    Package Name (NTLM only):    -

    Key Length:        0

 

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

-----

Is this behavior by design or what can I do to correct this?

 

Thanks,

Tim


Viewing all articles
Browse latest Browse all 6649

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>