Event log > doesn't have a logon event

Hello world

I get the next event and do not understand what he says:

-------------------------
An account could not connect.

Object:
Security ID: Karen-PC\Karen
Account name: Karen
Account domain: Karen-PC
Login ID: 0x64be4

Logon type: 3

The account to which the connection failed:
Security ID: NULL SID
Account name: comments
Account domain: Karen-PC

Failure information:
Reason for the failure: account currently disabled.
Status: 0xc000006e
Void / status: 0xc0000072

Process information:
Calling process ID: 0xd54
The calling process name: C:\Windows\explorer.exe

Network information:
The workstation name: Karen-PC
Source network address: -.
Source port: -.

Detailed authentication information:
Logon process: Advapi
Authentication package: negotiate
Transited Services: -.
Package Name (NTLM only): -.
Key length: 0

This event is generated when a logon request fails. It is generated on the
computer, when access was attempted.

The fields of the object indicate the account on the local system that requested the opening of session. It is more often a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the type of logon that was requested. The most common types are 2 (interactive) and 3 (network).

Process information fields indicate which account and process on the system asked the logon.

Information of the network fields indicate where source opening of remote session request. Workstation name is not always available and may be left blank in
some cases.

The authentication information fields provide detailed information
specific logon request.
-Transit services indicate which intermediate services participated in this logon request.
-Name of the package indicates what auxiliary Protocol was used among the NTLM protocols.
-Key length indicates the length of the generated session key. This
will be 0 if no session key was requested.

--------------------------------------

The part I didn't undestand, is that the "subject" is Karen (admin account). The newspaper said that Karen attempted to log in as a guest? Or the event means that someone tried to log in as a guest while Karen is logged? Also, the type of connection is 3, which should mean that someone tried to connect through the network. The system is running Vista Business.

See this:

http://www.EventID.NET/display.asp?eventid=4625&eventno=9984&source=Microsoft-Windows-security-auditing&phase=1

It seems that on behalf of Karen tries to a network logon with the account invited from the Explorer.

It is difficult to imagine a scenario that would cause this. Maybe something that is owned by the account invited who is attempting to access the account of Karen.

You can correlate this event with everything going on the computer, the startup, logon?

You may need to use a tool like process monitor to get more information about what causes this.

http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645

Tags: Windows

Similar Questions

  • the user profile service service doesn't have the logon, user profile cannot be loaded

    I can't sign until administrator, ergo, cannot apply fix

    If you used the recovery partition on your HP Compaq, you put it to how it was when new.

    You cannot reverse that.

    And if you have used non-destructive reinstall HP, you have used their data backup instructions, not Microsoft.

    You need to ask HP related to your data.

    And if it was a destructive reinstall, you must Recuva, etc..

    You want to say "Recuva", not to recover.

    http://www.Piriform.com/Recuva

    Good luck with your data, because if this does not work, you should contact the data recovery experts and they are expensive.

    See you soon.

  • Windows 8 Wifi doesn't have a valid IP configuration

    Background:
    I've been a happy user of Windows 7.  I did the upgrade of Windows 8 and internet connection seems to work very well for two days. Then, a few days ago Windows made the usual software updates after I shut down my computer.  The next time that I opened it upwards (yesterday), it wouldn't connect to the internet no matter what.  I'm computer savvy so tried all suspects, but to no avail.   I used the troubleshooting tool that came with "WiFi doesn't have a valid IP configuration."    Please don't tell me to turn on/off the router.  Tried that and it doesn't work.  I also tried the following at the command prompt (run as administrator):

    netsh winsock reset catalog (reset winsock entries)

    netsh int ip reset reset.log hit (reset TCP/IP stack).

    Then rebooted and still no luck.

    I am inclined to think that there is a compatibility issue, perhaps pilots.   I have a Toshiba Satellite P750.   The main thing is that my computer is now a useless brick and it's cost me money by not being able to get online (for my work).

    Here's my ipconfig/all the information.  I hope that someone can have useful information to resolve this problem once and for all.  My only other option is to go back to Windows 7 (which actually does not work) and avoid Windows 8 until it becomes a relatively bug free and viable operating system. Thanks for your help.

    ipconfig/all the details below
    Microsoft Windows [Version 6.2.9200]
    (c) Microsoft Corporation, 2012. All rights reserved.

    C:\Windows\System32>ipconfig/all

    Windows IP configuration

    Name of the host...: WRS
    Primary Dns suffix...:
    Node... type: hybrid
    Active... IP routing: No.
    Active... proxy WINS: No.

    Local Area Connection wireless LAN adapter * 11:

    State of the media...: Media disconnected
    The connection-specific DNS suffix. :
    ... Description: Microsoft Wi - Fi Direct virtual card
    Physical address.... : 06-DE-2B-5E-3D-FF
    DHCP active...: Yes
    Autoconfiguration enabled...: Yes

    Ethernet connection to the Local network card:

    State of the media...: Media disconnected
    The connection-specific DNS suffix. :
    Description...: Realtek PCIe GBE Family Controller
    Physical address.... : B8-70-F4-D6-8B-9D
    DHCP active...: Yes
    Autoconfiguration enabled...: Yes

    WiFi wireless LAN adapter:

    The connection-specific DNS suffix. :
    ... Description: Qualcomm Atheros AR9002WB-1NG wireless network adapter
    Physical address.... : 74-DE-2B-5E-3D-FF
    DHCP active...: Yes
    Autoconfiguration enabled...: Yes
    Address IPv6 local link...: fe80::c1b0:da1b:beff:2d85% 12 (Preferred)
    Autoconfiguration IPv4 address. . : 169.254.45.133 (Preferred)
    ... Subnet mask: 255.255.0.0.
    ... Default gateway. :
    DHCPv6 IOOKING...: 242540075
    DHCPv6 DUID customer...: 00-01-00-01-16-28-E4-18-74-DE-2B-5E-3D-FF

    DNS servers: fec0:0:0:ffff:1 1%
    FEC0:0:0:FFFF:2 1%
    FEC0:0:0:FFFF:3 1%
    NetBIOS over TCP/IP...: enabled

    Card tunnel Local Area Connection * 19:

    State of the media...: Media disconnected
    The connection-specific DNS suffix. :
    ... Description: Teredo Tunneling Pseudo-Interface
    Physical address.... : 00-00-00-00-00-00-00-E0
    DHCP active...: No.
    Autoconfiguration enabled...: Yes

    Tunnel adapter isatap. {7AA3C48C-ECE2-45AE-B872-C6440FB89E60}:

    State of the media...: Media disconnected
    The connection-specific DNS suffix. :
    ... Description: Adapter Microsoft ISATAP #2
    Physical address.... : 00-00-00-00-00-00-00-E0
    DHCP active...: No.
    Autoconfiguration enabled...: Yes

    C:\Windows\System32 >

    This he healed for me:

    I kept having the same problem connecting to the hotel Wi-Fi. No problem at home.

    It may have been a coincidence of timing, but my Internet connection was restored from being "limited" by the following text:

    In Internet explorer, go to tools, Internet options, content, and click Clear SSL State.

    Good luck!

  • guestScriptManager error: "guest authentication that is used doesn't have sufficient permissions to perform this operation.

    Hello

    I tried several days create a workflow to automatically remove the E1000 adapters on a virtual machine and its replacement by Vmxnet3 while maintaining the configuration of the network adapters.

    Everything works fine with Linux VM (as the configuration is automatically preserved) but I have an error on the virtual Windows computer where I have to run a Powershell script (tried with batch also script) with guestScriptManager package.

    Every script I try to run on a Windows 2008R2 VM does not reach the same step: create a temporary file in the comments. Error: "guest authentication that is used doesn't have sufficient permissions to perform this operation (workflow: create a temporary file in the task (item1) invited / Scriptable #8)"

    Strangely, I am able to run a script, one or two times to just after a VM deployment and then I'm stuck with this error.

    I tried with the local and domain administrator with no luck. I have no other description or log on to the error...

    Any help would be appreciated

    Thank you

    For those who are wondering, I just updated my 5.1 ESXi Update 2 and the problem is solved.

    Thanks to this thread: https://communities.vmware.com/thread/403326

  • Ip5 ios 9.3.5 line 4g doesn't have show just 3 g setting on hp 4g already tick

    Ip5 U.S. spec in Malaysia ios 9.3.5 line 4g doesn't have show just 3 g setting on hp 4g already tick

    This indicates that you purchased an incompatible version of your region. See below for the correct templates

    https://www.Apple.com/iPhone/LTE/#iPhone-5C-iPhone-5s

  • long keyboard doesn't have an eject button

    All I want to do is RESTART my browser - Web instructions say use the buttons: power/Eject and control command to restart.  My long keyboard has no power or eject button.  The single button / stop I know is on back at the bottom left of the screen.  Thank you.

    What is the keyboard that you are talking about? http://www.apple.com/shop/product/MB110LL/B/apple-keyboard-with-numeric-keypad-e French - usa? fnode = 56

    Who doesn't have a (between the third key sound and F13) eject button.

  • establishment of a new iPad for someone who doesn't have a computer

    establishment of a new iPad for someone who doesn't have a computer I can do this

    Yes.  iPads do not require a computer to set up.

    Start with the iPhone, iPad and iPod touch - Apple Support

    When you configure, make sure the person has all the codes and passwords used.

  • new downloads cause a continuous scroll effect. currently have 12.0 and doesn't have this problem. have a brain injury and cannot have this fast scrollin

    new downloads cause a continuous scroll effect. currently have 12.0 and doesn't have this problem. have a brain injury and cannot have this fast scrolling
    each time new updates are coming they seem to cause scrolling the page.
    I need a mobile page where I'm in control of how it moves.
    I'm afraid that if I don't keep current updates that computer security will be compromised.
    Thank you
    P.

    Where do you find this scroll?

    Is it in a browser window or in the Download Manager window or another?

    Start Firefox in Safe Mode to check if one of the extensions (Firefox/tools > Modules > Extensions) or if hardware acceleration is the cause of the problem (switch to the DEFAULT theme: Firefox/tools > Modules > appearance).

    • Do not click on the reset button on the start safe mode window or make changes.

    Please upgrade as soon as possible to the current version if you have downgraded because of this problem.

    If there is a problem with scrolling on web pages, then try to disable smooth scrolling.

    • Tools > Options > advanced > general: navigation: "Use smooth scrolling".

  • How to install my final studio cut in my iMac 4 k Vince? The 4K Vince iMac doesn't have an optical drive

    How to install my final studio cut in my iMac 4 k Vince? The 4K Vince iMac doesn't have an optical drive.

    You need to buy or borrow and external optical drive.

    Apple sells a:

    http://www.Apple.com/shop/product/MD564LL/A/Apple-USB-SuperDrive?FNODE=5F

    There are others also available-

    http://eShop.MacSales.com/item/OWC/MRSSDSDT8X/

    BUT do not forget that the FCS has been abandoned by Apple years ago, and the latest Apple operating systems are built without any concern as to the functionality of the FCS.

    Some of the apps in FCS are dead in the water, and others work with features limited or erratic.

    Anecdotal reports of problems running FCS on model are all over the map. Some do work, some don't.

    In addition, FCS2 has problems with the included Installer, requiring Rosetta to run (which is no longer included in the operating system), so it will not install without workaround.

    MtD

  • I want to import bookmarks from Safari on same Mac computer. Said Firefox Help Bar Menu/file/import. My Firefox doesn't have the file/import option. How to import bookmarks from Safari to Firefox?

    I want to import bookmarks from Safari on the same Mac computer. Firefox
    Aide said use bar Menu/file/import.
    My Firefox doesn't have the file/import option.
    How to import bookmarks from Safari to Firefox?

    10.2 Firefox on Lion does not import and backup under Show all bookmarks or the file import wizard and the option to import during the installation of Firefox did not work. Private browsing is not on. How to import bookmarks?

  • By updating my IPad IOS 9.3 Air, the following message appears: "unable to verify the update.  9.3 IOS doesn't have a verification because you are no longer connected to the Internet.  New attempt remind Me later

    By updating my IPad IOS 9.3 Air, the following message appears: "unable to verify the update.  9.3 IOS doesn't have a verification because you are no longer connected to the Internet.  New attempt remind Me later. " See the image below.

    Note that while I am able to get the email, do some research on the Internet, etc., that the update itself seems to be the culprit the disconnection of Internet while performing the check.  I closed all applications and even rebooted the IPad and then tried to run the update, but still get the same message.  Any other suggestions?

    Thank you in advance for your help!

    I'm having this problem too.

  • My school website appears in letters so small, that I can't read. My other browser doesn't have this problem. Is this something I did?

    I take some college courses online and when I go to the website of Blackboard, the lettering is super small. While the school suggests Firefox to undergo the tests, and any other time where time is important, I can't read anything without a LARGE magnifying glass. I have another browser installed and it doesn't have this problem. I wonder if I did something accidentally that spawned this apparition.

    Try to reset the zoom on the page, Firefox remembers the settings of zoom for each site. On the view menu, select Zoom and then select Reset. For more details, see the article of the font size and zoom - increase the size of the web pages .

  • Firefox 3.6.12 i686 doesn't have a return and arrows forward

    Firefox 3.6.12 i686 doesn't have a return and arrows before you use to return a page or a page forward. There is no choice for back or front, so click on the red x and exit.

    See the Navigation buttons such as back, home, bookmarks and recharge are missing.

  • My wife made me an iPhone 5, but it doesn't have a sim. How can I find out what IOS is on the phone and sellers it work on?

    My wife made me an iPhone 5, but it doesn't have a sim. How can I find out what IOS is on the phone and sellers it work on?

    On the back it is marked A1429.

    Other Sim cards by train until one works, you will need to go to an Apple Retail Store or contact Apple Support and make them check the lock for you state.

    http://www.Apple.com/contact/

    For the iOS version, he will find in the Middle-> General-> about-> Version once the iPhone is fully active.

  • Want: My HP 460c & window 10 doesn't have a beautiful color as in window 8.1 driver is faulty

    My HP 460c & window 10 doesn't have a beautiful color as in window 8.1 driver is faulty

    HP please, you have to come with an update of the correct printer driver.

    Yes I tried the other operatring system and found that the would was due to a bad lack of yellow ink cartridge, run the tool clean uo always the same, I'm waiting on a new cartridge to confirm the resolution of the problem.

Maybe you are looking for

  • return to 3.6.5?

    Firefox 5 sucks big time! I want to go back to 3.6 where all my Add ons worked. Why do they decide to make a new version to give up all the things that have worked in the previous version? It is a sloppy all design simply. I want that my return as we

  • do not record voices

    I can record voice via the built-in microphone, but not through my Scarlette 2i4 with a condenser MXL 3000 mic. I use this configuration on a regular basis for a few years and recorded several songs recently and everything was fine. Then the other da

  • Want 4504: Resolution of the scanner

    How can I change the location that I send my scan to?  It is always default to the cloud that doesn't help that I'm not always online when I want to call to the top of my scans. Also some scans, even with a 600 dpi resolution come out like the sizes

  • Cannot start Microsoft Outlook

    Cannot start Microsoft office Outlook. Cannot open the outlook window. Invalid XML the view cannot be loaded

  • Gross movement of photo files

    Two weeks ago, but not all my folders containing images suddenly appear empty and all of them have migrated to the "My pictures" folder  I have now largely replace them in subfolders holding in their records, but wonder how that happened?