Discussion:
Security Event ID 675
(too old to reply)
Greg F.
2004-11-10 21:45:01 UTC
Permalink
Hi All,

I am receiving the following failure audit in the security event logs:

Pre-authentication failed:
User Name: MemberServer$
User ID: Domain\MemberServer$
Service Name: krbtgt/Domain.Com
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: X.X.X.X

Now, I've researched all incidents of this message but they always refer to
an actual user account whereby the password was typed incorrectly. I cannot
find anything regarding a computer account. The messages occur
approximately every minute.

This server is a front-end Exchange server. Could this be causing any
issues?

Any help would be greatly appreciated.

Thanks,
Greg F.
Damon
2004-11-12 01:43:58 UTC
Permalink
I too am getting these events, the server is also an exchange server
if you find the answer to this I would also be intrested in it..
Steven L Umbach
2004-11-13 22:24:46 UTC
Permalink
The following KB article about troubleshooting kerberos errors for IIS may
help. I would also run netdiag support tool on it looking for any failures
pertaining to kerberos, dns, dc discovery, or secure channel and verify that
the time is in synch between the server and domain controller as kerberos
only allows for a five minute time skew or kerberos authentication will
fail. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;326985
Post by Greg F.
Hi All,
User Name: MemberServer$
User ID: Domain\MemberServer$
Service Name: krbtgt/Domain.Com
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: X.X.X.X
Now, I've researched all incidents of this message but they always refer
to an actual user account whereby the password was typed incorrectly. I
cannot find anything regarding a computer account. The messages occur
approximately every minute.
This server is a front-end Exchange server. Could this be causing any
issues?
Any help would be greatly appreciated.
Thanks,
Greg F.
Greg F.
2004-11-14 23:43:06 UTC
Permalink
Thank you very much for responding. This gives me another direction to
search. I will post if I find anything out.

-Greg F.
Post by Steven L Umbach
The following KB article about troubleshooting kerberos errors for IIS
may help. I would also run netdiag support tool on it looking for any
failures pertaining to kerberos, dns, dc discovery, or secure channel and
verify that the time is in synch between the server and domain controller
as kerberos only allows for a five minute time skew or kerberos
authentication will fail. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;326985
Post by Greg F.
Hi All,
User Name: MemberServer$
User ID: Domain\MemberServer$
Service Name: krbtgt/Domain.Com
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: X.X.X.X
Now, I've researched all incidents of this message but they always refer
to an actual user account whereby the password was typed incorrectly. I
cannot find anything regarding a computer account. The messages occur
approximately every minute.
This server is a front-end Exchange server. Could this be causing any
issues?
Any help would be greatly appreciated.
Thanks,
Greg F.
Loading...