News:

Buffalo provides Data Recovery services. Read about it here.

Main Menu

Failure Audit on Windows Domain Controller

Started by TSPLarry, November 01, 2012, 03:23:08 PM

Previous topic - Next topic

TSPLarry

We have a TS-QVHL that has been successfully added to our domain - or so we think.  It displays the entire user list correctly and allows access the way we expect it to.  The firmware version is up to date at 1.12.  

 

However, it's producing a Failure Audit message 4-5 times per second in the System log on our domain controller.  The user listed in the event is "admin", the default administrator account for the Terastation.  

 

Any idea why this would be happening?  The NAS was joined to the domain using the Windows administrator account, not "admin".  

 

Here's a sample event:  

 

Event Type:        Failure Audit
Event Source:    Security
Event Category:                Account Logon
Event ID:              680
Date:                     11/1/2012
Time:                     3:05:17 PM
User:                     NT AUTHORITY\SYSTEM
Computer:          xxx (name of domain controller)
Description:
Logon attempt by:           MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: admin
Source Workstation:       \\yyy (name of Terastation)
Error Code:         0xC0000064

Logon attempt by:   MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

Logon account:       admin

Source Workstation:       \\yyy (name of Terastation)

Error Code:             0xC0000064

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp." target="_blank">http://go.microsoft.com/fwlink/events.asp.


TSPLarry

Are we really the only ones seeing this?  

 

If I drop the box off of the domain, the errors to the domain controller stop immediately.  As soon as I add it back, the errors start up again.  

 

It's definitely joining to the domain, because I can see the entire domain user list on the Terastation when it's joined.  

 

Does anyone else have one of these joined to a domain?  If so, do you see the errors in the event log as described above?  

 

Thanks,

Larry


Browser ID: smf (is_webkit)
Templates: 4: index (default), Display (default), GenericControls (default), GenericControls (default).
Sub templates: 6: init, html_above, body_above, main, body_below, html_below.
Language files: 5: index+Modifications.english (default), Post.english (default), Editor.english (default), Drafts.english (default), StopForumSpam.english (default).
Style sheets: 4: index.css, attachments.css, jquery.sceditor.css, responsive.css.
Hooks called: 128 (show)
Files included: 35 - 1354KB. (show)
Memory used: 933KB.
Tokens: post-login.
Queries used: 16.

[Show Queries]