我在 Win 2012 服务器中收到大量 4625 事件。以下是事件详细信息。帐户名称和工作站名称相同,并且是我收到“帐户登录失败”事件的计算机的主机名。有人能帮我解决这个问题吗?
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 05/01/2017 6:47:08 AM
Event ID: 4625
Task Category: Logon
Level: Information
Keywords: Audit Failure
User: N/A
Computer: http://(ServerHostname).example.com
Description:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed: Security ID: NULL SID
Account Name: ServerHostname
Account Domain: example
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xC000006D
Sub Status: 0xC0000064
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: ServerHostname
Source Network Address: ::1
Source Port: 50364
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0