How to understand code on event viewer ?

Le
bigstyle
Hello,

I have a little question about your method to understand error code
like that :

Type: Failure Aud
Source: security
Categorie : logon/logoff
EventID : 529
User: NT Authority/system
Computer serveurweb

Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: Serverweb
Logon Type: 8
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVERWEB
Caller User Name: SERVERWEB$
Caller Domain: MON DOMAINE
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 828
Transited Services: -
Source Network Address: -
Source Port: -

What is the Caller Logon ID and how can we "translate" the 0x3E7 value
to something interesting ?

Thanks a lot.
Vos réponses
Gagnez chaque mois un abonnement Premium avec GNT : Inscrivez-vous !
Trier par : date / pertinence
bigstyle
Le #709369
On 21 fév, 00:34, "bigstyle"
Hello,

I have a little question about your method to understand error code
like that :

Type: Failure Aud
Source: security
Categorie : logon/logoff
EventID : 529
User: NT Authority/system
Computer serveurweb

Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: Serverweb
Logon Type: 8
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVERWEB
Caller User Name: SERVERWEB$
Caller Domain: MON DOMAINE
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 828
Transited Services: -
Source Network Address: -
Source Port: -

What is the Caller Logon ID and how can we "translate" the 0x3E7 value
to something interesting ?

Thanks a lot.


Oups, désolé pour cette fausse manip :-/

Vu l'heure tardive, je ne pas vérifié que je postais sur une newsgroup
francaise :D

En résumé, j'aurai donc voulu savoir comment vous rendiez un code de
type 0x3e7 utilisable et si vous saviez à quoi correspondait le Caller
Logon ID.

Merci d'avance ;-)

Publicité
Poster une réponse
Anonyme