Hello,

I have a little question about your method to understand error code
like that :

Type: Failure Aud
Source: security
Categorie : logon/logoff
EventID : 529
User: NT Authority/system
Computer serveurweb

Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: Serverweb
Logon Type: 8
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVERWEB
Caller User Name: SERVERWEB$
Caller Domain: MON DOMAINE
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 828
Transited Services: -
Source Network Address: -
Source Port: -

What is the Caller Logon ID and how can we "translate" the 0x3E7 value
to something interesting ?

Thanks a lot.

On 21 fév, 00:34, "bigstyle" <bigsty...@gmail.com> wrote:
> Hello,
>
> I have a little question about your method to understand error code
> like that :
>
> Type: Failure Aud
> Source: security
> Categorie : logon/logoff
> EventID : 529
> User: NT Authority/system
> Computer serveurweb
>
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: Administrator
> Domain: Serverweb
> Logon Type: 8
> Logon Process: IIS
> Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Workstation Name: SERVERWEB
> Caller User Name: SERVERWEB$
> Caller Domain: MON DOMAINE
> Caller Logon ID: (0x0,0x3E7)
> Caller Process ID: 828
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
> What is the Caller Logon ID and how can we "translate" the 0x3E7 value
> to something interesting ?
>
> Thanks a lot.

Oups, désolé pour cette fausse manip :-/

Vu l'heure tardive, je ne pas vérifié que je postais sur une newsgroup
francaise

En résumé, j'aurai donc voulu savoir comment vous rendiez un code de
type 0x3e7 utilisable et si vous saviez à quoi correspondait le Caller
Logon ID.

Merci d'avance ;-)