Home » eventid

Tag: eventid

Storefront Logon Failure Event ID

Security Log > Audit Failure Event ID 4625

An account failed to log on.

Subject:
Security ID: NETWORK SERVICE
Account Name: SERVER$
Account Domain: DOMAIN
Logon ID: 0x3e4

Logon Type: 8

Account For Which Logon Failed:
Security ID: NULL SID
Account Name: jamesscanlon
Account Domain: DOMAIN

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a

Process Information:
Caller Process ID: 0xa20
Caller Process Name: C:Program FilesCitrixReceiver StoreFrontServicesDefaultDomainServicesCitrix.DeliveryServices.ServiceHosting.WindowsServiceHost.exe

Super Boring EventID Post

A list of the common EventID’s I always want to search for but can never remember.

 

 

Log Name: Security EventID: 4624 – Discover Successful logon account ID’s local or on DCs

Log Name: System Source: bugcheck EventID: 1001 – the computer has rebooted from a bugcheck

Log Name: System Source: EventLog EventID: 6008 – previous system shutdown was unexpected

Log Name: System Source: srv EventID: 2013 – disk is at or near capacity