Computername $

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Computername $

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> Computername $

Page: [1]

Message

<< Older Topic Newer Topic >>

Computername $ - 16.Sep.2008 7:04:27 AM

howardmp

Posts: 34
Score: 0
Joined: 29.Mar.2005
From: London
Status: offline

Hello all,
On looking at Reporter, I see large number of "Domainname\computername$ 675 pre-authentication failure"
Are these Kerberos related, what's are they telling me?
Many thanks
Howrd

Post #: 1

RE: Computername $ - 17.Sep.2008 9:13:27 AM

DrewE

Posts: 1246
Score: 0
Joined: 28.Apr.2008
From: Cary, NC
Status: offline

I believe these can be safely ignored. These are machines connecting to other machines to retrieve system information. You will find a noise filtering rule ("Ignore events generated by computer accounts") that should limit the number of entries in the database for this type of event.

_____________________________

Drew Easley
GFI Software
Talk Tech To Me (GFI Blog) � Follow Us (Twitter) - Watch Us (YouTube) - Join us (Facebook)

(in reply to howardmp)

Post #: 2

RE: Computername $ - 19.Oct.2008 9:53:20 AM

captainjamestkirk

Posts: 5
Score: 0
Joined: 8.Oct.2008
Status: offline

I have that same issue, but cannot find that noise filtering rule:

I am going to

computer groups then to servers, right click for properties,
then windows event logs,noise reduction

I only see:
user based noise
defective logging noise
over logging noise
typical behaviour

is there someplace else to look?

(in reply to DrewE)