Domain Controller Security Event 4625 Logon Type 3 Account Name ***

Ronald Seow 206 Reputation points
2021-10-08T03:57:15.753+00:00

Good morning

Does anyone know why failed logon event 4625 has account name abc.com*** that originate from workstation name host1

Error is as below;

An account failed to log on

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

Account for which logon failed:
Security ID: NULL SID
Account Name: abc.com***
Account Domain:

Failure information:
Failure reason: unknown user name or password
Status: 0xC000006D
Sub status: 0xC0000064

Process information:
Caller process id: 0x0
Caller process name: -

Network information:
Workstation name: host1
Source network address: 192.168.1.10
Source port: 64920

Detailed authentication information:
Logon process: ntlmssp
Authentication package: ntlm
Transited services: -
Package name (ntlm only): -
Key length: 0

Appreciate any advise.

Thank you
Ronald

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,087 questions
0 comments No comments
{count} votes