Code: Selecteer alles
Event[0]:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2014-12-03T09:04:12.194
Event ID: 4625
Task: Logon
Level: Information
Opcode: Info
Keyword: Audit Failure
User: N/A
User Name: N/A
Computer: [naam v/d Exchange-server]
Description:
An account failed to log on.
Subject:
Security ID: S-1-5-18
Account Name: [naam v/d Exchange-server]$
Account Domain: [domeinnaam v/d organisatie]
Logon ID: 0x3e7
Logon Type: 8
Account For Which Logon Failed:
Security ID: S-1-0-0
Account Name: [bestaande gebruikersnaam]
Account Domain: [naam v/d Exchange-server]
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0xea0
Caller Process Name: C:\Windows\System32\inetsrv\w3wp.exe
Network Information:
Workstation Name: [naam v/d Exchange-server]
Source Network Address: [het extern IP van waarop verbonden wordt]
Source Port: [poort van waarop verbonden wordt]
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
Doet dit iemand een belletje rinkelen? Google is bij deze niet mijn vriend...
