I changed the Admin password on the Server I managed. Changed it through the Change Password on the Crt-Alt-Del screen.
Since then I have been getting the following error message in the event log, about 100 times per day every 30 minutes. The only difference is that the source port is never the same. I have restarted the Server several times, but makes no difference.
I have banked out the User Name and Domain.
I am running SBS2003 with SP2 and all updates applied.
Event Type:Failure Audit
Event Source:Security
Event Category:Logon/Logoff
Event ID:529
Date:10/12/2012
Time:09:11:49
User:NT AUTHORITY\SYSTEM
Computer:SERVER
Description:
Logon Failure:
Reason:
Unknown user name or bad password
User Name:
XXXXXXXX
Domain:
XXXXXXXX
Logon Type:
3
Logon Process:Advapi
Authentication Package:Negotiate
Workstation Name:SERVER
Caller User Name:SERVER$
Caller Domain:BANCUMM
Caller Logon ID:(0x0,0x3E7)
Caller Process ID:468
Transited Services:-
Source Network Address:192.168.16.2
Source Port:
49285
Regards
Trevor