Beruflich Dokumente
Kultur Dokumente
Courtesy of
Ultimate Windows
Security.com
Important Windows Security Events
(Domain Controllers)
Event ID Category
Audit account
logon events
675
Explanation
Event 675 on a domain controller indicates a
failed initial attempt to logon via Kerberos at a
workstation with a domain account usually due
to a bad password but the failure code indicates
exactly why authentication failed. See Kerberos
failure codes below.
676 or
Failed 672
Audit
account logon
events
681 or
Failed 680
Audit account
logon events
Audit account
management
642
632, 636,
660
Audit account
management
624
Audit account
management
644
Audit account
management
517
Audit system
events
Error Code
Cause
12
18
23
24
32
37
Explanation
3221225572
C0000064
3221225578
C000006A
3221226036
C0000234
3221225586
C0000072
3221225583
C000006F
3221225584
C0000070
workstation restriction
3221225875
C0000193
account expiration
3221225585
C0000071
expired password
3221226020
C0000224
Logon Types
Logon/Logoff
Event ID
Title:
Logon Type
Description
528
Successful Logon
529
530
531
532
533
534
Logon Failure - The user has not been granted the requested
logon type at this machine
535
NewCredentials
10
11
539
540
Get the Bigger and Better 18x24 Windows Security Log Poster Free at freelogposter.com
Browse to