Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 675 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Pre-authentication failed: User Name: PQR User ID: DOMAIN\PQR Service Name: krbtgt/DOMAIN Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.0.106 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 675 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Pre-authentication failed: User Name: PQR User ID: DOMAIN\PQR Service Name: krbtgt/DOMAIN Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.0.106 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 675 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Pre-authentication failed: User Name: PQR User ID: DOMAIN\PQR Service Name: krbtgt/DOMAIN Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.0.106 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: PQR Source Workstation: Exchange Server Error Code: 0xC000006A For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon Failure: Reason: Unknown user name or bad password User Name: PQR Domain: DOMAIN Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: Exchange Server Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.168.0.6 Source Port: 39781 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 675 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Pre-authentication failed: User Name: PQR User ID: DOMAIN\PQR Service Name: krbtgt/DOMAIN Pre-Authentication Type: 0x2 Failure Code: 0x18 Client Address: 192.168.0.106 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: PQR Source Workstation: Exchange Server Error Code: 0xC0000234 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon Failure: Reason: Account locked out User Name: PQR Domain: DOMAIN Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: Exchange Server Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.168.0.6 Source Port: 0 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 675 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Pre-authentication failed: User Name: PQR User ID: DOMAIN\PQR Service Name: krbtgt/DOMAIN Pre-Authentication Type: 0x2 Failure Code: 0x12 Client Address: 192.168.0.106 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: PQR Source Workstation: Exchange Server Error Code: 0xC0000234 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: 3/27/2008 Time: 8:00:10 PM User: NT AUTHORITY\SYSTEM Computer: Domain Controller Description: Logon Failure: Reason: Account locked out User Name: PQR Domain: DOMAIN Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: Exchange Server Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.168.0.6 Source Port: 0 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.