none
Event ID 4776 / 0xc00006a RRS feed

  • Question

  • Hi

    I am seeing lots of credential validation Audit Failures on one of our DC's from various accounts because of a bad passwords.  However I have not had reports of lockouts from any of those accounts.  

    The strange thing is when I enable netlogon debug, the debug log does not show any errors and I  see the accounts successfully validating credentials for the exact same timestamp.

    Can anyone advise why these errors are been generated in the event log?   

    Example 

    Event log

    The computer attempted to validate the credentials for an account.

    Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
    Logon Account: svc_xxxxxx_emea
    Source Workstation: xxxxxxxPT01
    Error Code: 0xC000006A

    10/28/2020 11:49:06 AM

    Debug log

    10/28 11:49:06 [LOGON] [7904] domainname: SamLogon: Transitive Network logon of domain\svc_xxxxxxx_emea from xxxxxxxPT01 (via E01WPBSSQ01) Entered
    10/28 11:49:06 [LOGON] [7904] domainname: SamLogon: Transitive Network logon of domain\svc_xxxxxx_emea from xxxxxxxPT01 successfully handled on DC(UseHub is FALSE).
    10/28 11:49:06 [LOGON] [7904] domainname: SamLogon: Transitive Network logon of domain\svc_xxxxxx_emea from xxxxxxxPT01 (via xxxxxxxSQ01) Returns 0x0

    thanks in advance 



    Wednesday, October 28, 2020 12:01 PM

Answers

All replies

  • I'd try asking for help over here.

    https://docs.microsoft.com/en-us/answers/topics/windows-active-directory.html

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Wednesday, October 28, 2020 12:29 PM
    Moderator
  • Thanks

    Wednesday, October 28, 2020 1:35 PM
  • You're welcome.

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Wednesday, October 28, 2020 1:52 PM
    Moderator