1st machine to have the issue: Event Type: Warning Event Source: MRxSmb Event Category: None Event ID: 3034 Date: 3/20/2008 Time: 1:00:53 PM User: N/A Computer: IMG-SVR Description: The redirector was unable to initialize security context or query context attributes. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00080000 00560002 00000000 80000bda 0010: 00000000 c0000072 00000000 00000000 0020: 00000000 00000000 0000047d c0000072 Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7013 Date: 3/20/2008 Time: 3:38:57 PM User: N/A Computer: IMG-SVR Description: Logon attempt with current password failed with the following error: Logon failure: unknown user name or bad password. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5788 Date: 3/20/2008 Time: 3:32:14 PM User: N/A Computer: IMG-SVR Description: Attempt to update HOST Service Principal Names (SPNs) of the computer object in Active Directory failed. The updated values were '' and ''. The following error occurred: The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 32 03 09 80 2..€ Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5789 Date: 3/20/2008 Time: 3:32:14 PM User: N/A Computer: IMG-SVR Description: Attempt to update DNS Host Name of the computer object in Active Directory failed. The updated value was 'IMG-SVR.LOCAL.DOMAIN.COM. The following error occurred: The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 32 03 09 80 2..€ Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: 3/20/2008 Time: 3:58:05 PM User: NT AUTHORITY\SYSTEM Computer: IMG-SVR Description: Logon Failure: Reason: An error occurred during logon User Name: Domain: Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: - Status code: %7 Substatus code: %8 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Domain Controller: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: 3/20/2008 Time: 3:31:23 PM User: NT AUTHORITY\SYSTEM Computer: NBCSERVER2005 Description: Logon Failure: Reason: Account locked out User Name: administrator Domain: local.domain.com Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: IMG-SVR For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: 3/20/2008 Time: 3:23:37 PM User: NT AUTHORITY\SYSTEM Computer: NBCSERVER2005 Description: Logon Failure: Reason: Account locked out User Name: ADMINISTRATOR Domain: Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: \\NBC_STN17 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.