Rank,Event Receive Time,Reporting IP,,Event Type,Event Name,,Source IP,Source MAC,Raw Event 1,5/17/10 15:10,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:10:03 192.168.0.10 MSWinEventLog 1 Security 4880219 Wed Jun 03 03:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4854764" 2,5/17/10 15:10,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:10:03 192.168.0.10 MSWinEventLog 1 Security 4880218 Wed Jun 03 03:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4854763" 3,5/17/10 15:10,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:10:04 192.168.0.10 MSWinEventLog 1 Security 4880222 Wed Jun 03 03:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4854767" 4,5/17/10 15:10,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:10:04 192.168.0.10 MSWinEventLog 1 Security 4880221 Wed Jun 03 03:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4854766" 5,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:02 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5199 Mon Jun 15 20:45:10 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: ADMINISTRATOR Source Workstation: 172.16.10.36 Error Code: 0xc000006a 5185" 6,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:02 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5200 Mon Jun 15 20:45:10 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: ADMINISTRATOR Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 7,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,192.168.16.10,,"<13>May 17 15:20:17 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5460 Mon Jun 15 20:48:53 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-5-18 Account Name: QA-V-WIN08$ Account Domain: PROSPECT-HILLS0 Logon ID: 0x3e7 Logon Type: 10 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: testuserdc112 Account Domain: PROSPECT-HILLS0 Failure Information: Failure Reason: The user has not been granted the requested logon type at this machine. Status: 0xc000015b Sub Status: 0x0 Process Information: Caller Process ID: 0xe50 Caller Process Name: C:\Windows\System32\winlogon.exe Network Information: Workstation Name: QA-V-WIN08 Source Network Address: 192.168.16.10 Source Port: 54160 Detailed Authentication Information: Logon Process: User32 Authentication Package: Negotiate T" 8,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5969 Mon Jun 15 20:52:57 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 5943" 9,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5970 Mon Jun 15 20:52:57 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 10,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5972 Mon Jun 15 20:53:00 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 5946" 11,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5973 Mon Jun 15 20:53:00 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 12,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5976 Mon Jun 15 20:53:03 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 5950" 13,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5977 Mon Jun 15 20:53:03 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 14,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5979 Mon Jun 15 20:53:06 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5953" 15,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5980 Mon Jun 15 20:53:06 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 16,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:45 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5983 Mon Jun 15 20:53:09 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5956" 17,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5984 Mon Jun 15 20:53:09 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 18,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5986 Mon Jun 15 20:53:13 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5959" 19,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5987 Mon Jun 15 20:53:13 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 20,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5989 Mon Jun 15 20:53:16 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5962" 21,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5990 Mon Jun 15 20:53:16 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 22,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5994 Mon Jun 15 20:53:31 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5967" 23,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5995 Mon Jun 15 20:53:31 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 24,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5997 Mon Jun 15 20:53:34 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5970" 25,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 5998 Mon Jun 15 20:53:34 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 26,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6000 Mon Jun 15 20:53:37 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 5973" 27,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:46 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6001 Mon Jun 15 20:53:37 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 28,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6176 Mon Jun 15 20:56:32 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 29,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6175 Mon Jun 15 20:56:32 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 6146" 30,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6172 Mon Jun 15 20:56:28 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 31,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6171 Mon Jun 15 20:56:28 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 6142" 32,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6169 Mon Jun 15 20:56:25 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 33,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6168 Mon Jun 15 20:56:25 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc000006a 6139" 34,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6166 Mon Jun 15 20:56:13 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: ADMINISTRATOR Account Domain: 172.16.10.36 Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc000006a Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon requ" 35,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:56 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6165 Mon Jun 15 20:56:13 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: ADMINISTRATOR Source Workstation: 172.16.10.36 Error Code: 0xc000006a 6136" 36,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6186 Mon Jun 15 20:56:38 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6157" 37,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6187 Mon Jun 15 20:56:38 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 38,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6189 Mon Jun 15 20:56:39 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6160" 39,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6195 Mon Jun 15 20:56:51 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6166" 40,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6183 Mon Jun 15 20:56:35 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6154" 41,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6184 Mon Jun 15 20:56:35 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 42,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6190 Mon Jun 15 20:56:39 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 43,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6192 Mon Jun 15 20:56:43 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6163" 44,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6193 Mon Jun 15 20:56:43 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 45,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6196 Mon Jun 15 20:56:51 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 46,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6198 Mon Jun 15 20:56:57 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6169" 47,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:57 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6199 Mon Jun 15 20:56:57 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 48,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6201 Mon Jun 15 20:57:05 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6172" 49,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6202 Mon Jun 15 20:57:05 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 50,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,172.16.10.36 (QA-V-Win08-ADS),,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6204 Mon Jun 15 20:57:15 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: 172.16.10.36 Error Code: 0xc0000234 6175" 51,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6205 Mon Jun 15 20:57:15 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: 172.16.10.36 Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: 172.16.10.36 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is gener" 52,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4776-failure,Windows local or domain-via-NTLM authentication failed,,,,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6207 Mon Jun 15 20:57:24 2009 4776 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None The domain controller attempted to validate the credentials for an account. Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon Account: TESTUSERDC112 Source Workstation: Error Code: 0xc0000234 6178" 53,5/17/10 15:20,172.16.10.36 (QA-V-Win08-ADS),,Win-Security-4625,Windows logon failure,,,,"<13>May 17 15:20:58 QA-V-Win08.prospect-hills.com MSWinEventLog 0 Security 6208 Mon Jun 15 20:57:24 2009 4625 Microsoft-Windows-Security-Auditing N/A N/A Information QA-V-Win08.prospect-hills.com None An account failed to log on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: S-1-0-0 Account Name: TESTUSERDC112 Account Domain: Failure Information: Failure Reason: Account locked out. Status: 0xc0000234 Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is generated on the computer whe" 54,5/17/10 15:21,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:21:19 192.168.0.10 MSWinEventLog 1 Security 4881002 Wed Jun 03 03:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4855541" 55,5/17/10 15:21,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:21:19 192.168.0.10 MSWinEventLog 1 Security 4881000 Wed Jun 03 03:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4855539" 56,5/17/10 15:21,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:21:19 192.168.0.10 MSWinEventLog 1 Security 4881001 Wed Jun 03 03:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4855540" 57,5/17/10 15:21,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:21:20 192.168.0.10 MSWinEventLog 1 Security 4881003 Wed Jun 03 03:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4855542" 58,5/17/10 15:27,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 15:27:02 192.168.0.10 MSWinEventLog 1 Security 4881372 Wed Jun 03 03:33:09 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4855908" 59,5/17/10 15:27,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 15:27:02 192.168.0.10 MSWinEventLog 1 Security 4881373 Wed Jun 03 03:33:09 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4855909" 60,5/17/10 15:27,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 15:27:02 192.168.0.10 MSWinEventLog 1 Security 4881371 Wed Jun 03 03:33:09 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4855907" 61,5/17/10 15:33,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:33:19 192.168.0.10 MSWinEventLog 1 Security 4881783 Wed Jun 03 03:40:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4856312" 62,5/17/10 15:33,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:33:19 192.168.0.10 MSWinEventLog 1 Security 4881784 Wed Jun 03 03:40:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4856313" 63,5/17/10 15:33,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:33:20 192.168.0.10 MSWinEventLog 1 Security 4881785 Wed Jun 03 03:40:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4856314" 64,5/17/10 15:33,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:33:20 192.168.0.10 MSWinEventLog 1 Security 4881786 Wed Jun 03 03:40:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4856315" 65,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:29 192.168.0.10 MSWinEventLog 1 Security 4882557 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857086" 66,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:29 192.168.0.10 MSWinEventLog 1 Security 4882558 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857087" 67,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:29 192.168.0.10 MSWinEventLog 1 Security 4882559 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857088" 68,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:29 192.168.0.10 MSWinEventLog 1 Security 4882560 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857089" 69,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:29 192.168.0.10 MSWinEventLog 1 Security 4882561 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857090" 70,5/17/10 15:44,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:44:30 192.168.0.10 MSWinEventLog 1 Security 4882562 Wed Jun 03 03:55:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857091" 71,5/17/10 15:55,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:55:58 192.168.0.10 MSWinEventLog 1 Security 4883311 Wed Jun 03 04:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857840" 72,5/17/10 15:56,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:56:02 192.168.0.10 MSWinEventLog 1 Security 4883312 Wed Jun 03 04:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857841" 73,5/17/10 15:56,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:56:02 192.168.0.10 MSWinEventLog 1 Security 4883313 Wed Jun 03 04:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857842" 74,5/17/10 15:56,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:56:02 192.168.0.10 MSWinEventLog 1 Security 4883314 Wed Jun 03 04:10:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4857843" 75,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:58 192.168.0.10 MSWinEventLog 1 Security 4883617 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858144" 76,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:58 192.168.0.10 MSWinEventLog 1 Security 4883619 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858146" 77,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:58 192.168.0.10 MSWinEventLog 1 Security 4883618 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858145" 78,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883622 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858149" 79,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883624 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858151" 80,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883626 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858153" 81,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883620 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858147" 82,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883623 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858150" 83,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883625 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858152" 84,5/17/10 15:59,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 15:59:59 192.168.0.10 MSWinEventLog 1 Security 4883627 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858154" 85,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883634 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858161" 86,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883633 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858160" 87,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883631 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858158" 88,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883628 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858155" 89,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883636 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858163" 90,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883635 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858162" 91,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883632 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858159" 92,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883630 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858157" 93,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:00 192.168.0.10 MSWinEventLog 1 Security 4883629 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858156" 94,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883646 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858173" 95,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883643 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858170" 96,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883641 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858168" 97,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883645 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858172" 98,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = xjia, domain = " 99,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = terry, domain = " 100,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = john.doe, domain = " 101,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = vcole, domain = " 102,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = bwood, domain = " 103,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = bpitt, domain = " 104,5/17/10 16:00,192.168.16.1,,Cisco-VPN3K-AUTH/5,Failed VPN logon,,99.129.50.155,,"<188>May 17 16:00:01 192.168.16.1 70429 01/24/1999 19:28:16.520 SEV=3 AUTH/5 RPT=8 99.129.50.155 Authentication rejected: Reason = Unspecified handle = 93, server = 192.168.0.10, user = jgreen, domain = " 105,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883642 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858169" 106,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883640 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858167" 107,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883639 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858166" 108,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883638 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858165" 109,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:01 192.168.0.10 MSWinEventLog 1 Security 4883637 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858164" 110,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883660 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858187" 111,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883658 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858185" 112,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883652 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858179" 113,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883651 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858178" 114,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883649 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858176" 115,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883659 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858186" 116,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883656 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858183" 117,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883648 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858175" 118,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:02 192.168.0.10 MSWinEventLog 1 Security 4883647 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858174" 119,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883654 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858181" 120,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883655 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858182" 121,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883653 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858180" 122,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883644 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858171" 123,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883650 Wed Jun 03 04:16:51 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858177" 124,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883621 Wed Jun 03 04:16:50 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858148" 125,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:03 192.168.0.10 MSWinEventLog 1 Security 4883664 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858191" 126,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:04 192.168.0.10 MSWinEventLog 1 Security 4883661 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858188" 127,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:04 192.168.0.10 MSWinEventLog 1 Security 4883662 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858189" 128,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:04 192.168.0.10 MSWinEventLog 1 Security 4883657 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858184" 129,5/17/10 16:00,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:00:04 192.168.0.10 MSWinEventLog 1 Security 4883663 Wed Jun 03 04:16:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858190" 130,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883906 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858431" 131,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883907 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858432" 132,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883908 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858433" 133,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883910 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858435" 134,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883911 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858436" 135,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:18 192.168.0.10 MSWinEventLog 1 Security 4883913 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858438" 136,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883927 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858452" 137,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883914 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858439" 138,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883915 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858440" 139,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883917 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858442" 140,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883919 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858444" 141,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883921 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858446" 142,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883922 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858447" 143,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:19 192.168.0.10 MSWinEventLog 1 Security 4883926 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858451" 144,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883935 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858460" 145,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883934 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858459" 146,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883933 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858458" 147,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883932 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858457" 148,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883931 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858456" 149,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883930 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858455" 150,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:20 192.168.0.10 MSWinEventLog 1 Security 4883928 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858453" 151,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:21 192.168.0.10 MSWinEventLog 1 Security 4883923 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858448" 152,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:21 192.168.0.10 MSWinEventLog 1 Security 4883918 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858443" 153,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:21 192.168.0.10 MSWinEventLog 1 Security 4883916 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858441" 154,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:21 192.168.0.10 MSWinEventLog 1 Security 4883912 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858437" 155,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:21 192.168.0.10 MSWinEventLog 1 Security 4883909 Wed Jun 03 04:21:14 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858434" 156,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883946 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858471" 157,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883945 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858470" 158,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883947 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858472" 159,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883948 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858473" 160,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883944 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858469" 161,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883943 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858468" 162,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883942 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858467" 163,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883929 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858454" 164,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:22 192.168.0.10 MSWinEventLog 1 Security 4883924 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858449" 165,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883954 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858479" 166,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883951 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858476" 167,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883949 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858474" 168,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883937 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858462" 169,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883939 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858464" 170,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883938 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858463" 171,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883936 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858461" 172,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883952 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858477" 173,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:23 192.168.0.10 MSWinEventLog 1 Security 4883950 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858475" 174,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883960 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858485" 175,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883957 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858482" 176,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883941 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858466" 177,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883976 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858501" 178,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883977 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858502" 179,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883961 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858486" 180,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883959 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858484" 181,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883953 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858478" 182,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:24 192.168.0.10 MSWinEventLog 1 Security 4883940 Wed Jun 03 04:21:15 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858465" 183,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:04:25 192.168.0.10 MSWinEventLog 1 Security 4883989 Wed Jun 03 04:21:28 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858514" 184,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:25 192.168.0.10 MSWinEventLog 1 Security 4883980 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858505" 185,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:25 192.168.0.10 MSWinEventLog 1 Security 4883978 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858503" 186,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:25 192.168.0.10 MSWinEventLog 1 Security 4883979 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858504" 187,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:26 192.168.0.10 MSWinEventLog 1 Security 4883955 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858480" 188,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883956 Wed Jun 03 04:21:16 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858481" 189,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883958 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858483" 190,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883963 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858488" 191,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883964 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858489" 192,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883965 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858490" 193,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883966 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858491" 194,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883967 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858492" 195,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:27 192.168.0.10 MSWinEventLog 1 Security 4883968 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858493" 196,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883972 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858497" 197,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883975 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858500" 198,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883974 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858499" 199,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883973 Wed Jun 03 04:21:18 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858498" 200,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883971 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858496" 201,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883970 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858495" 202,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-675,Windows kerberos domain controller authentication failed,,192.168.1.39,,"<13>May 17 16:04:28 192.168.0.10 MSWinEventLog 1 Security 4883969 Wed Jun 03 04:21:17 2009 675 Security SYSTEM User Failure Audit ADS-PRI Account Logon Pre-authentication failed: User Name: SJDEVVWINDB06$ User ID: %{S-1-5-21-3383442562-1768178646-255068551-1182} Service Name: krbtgt/ACME.NET Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.1.39 4858494" 203,5/17/10 16:04,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:04:29 192.168.0.10 MSWinEventLog 1 Security 4883990 Wed Jun 03 04:21:28 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858515" 204,5/17/10 16:07,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:07:25 192.168.0.10 MSWinEventLog 1 Security 4884228 Wed Jun 03 04:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858751" 205,5/17/10 16:07,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:07:25 192.168.0.10 MSWinEventLog 1 Security 4884230 Wed Jun 03 04:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858753" 206,5/17/10 16:07,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:07:27 192.168.0.10 MSWinEventLog 1 Security 4884229 Wed Jun 03 04:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858752" 207,5/17/10 16:07,192.168.0.10 (ads-pri),,Win-Security-672-failure,Windows kerberos domain authentication failed,,192.168.20.68,,"<13>May 17 16:07:28 192.168.0.10 MSWinEventLog 1 Security 4884231 Wed Jun 03 04:25:52 2009 672 Security SYSTEM User Failure Audit ADS-PRI Account Logon Authentication Ticket Request: User Name: kobe_desktop$ Supplied Realm Name: ACME.NET User ID: - Service Name: krbtgt/ACME.NET Service ID: - Ticket Options: 0x40810010 Result Code: 0x6 Ticket Encryption Type: - Pre-Authentication Type: - Client Address: 192.168.20.68 Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: 4858754" ,,,,,,Page 1 of,,,,5/17/10 16:10