Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

Event ID 539 logged in Event Viewer

Event ID 539 logged in Event Viewer

this thread has 4 replies and has been viewed 8953 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 29th September 2006, 15:08
londoner londoner is offline
Casual
Casual
 
 Join Date: Sep 2006
  6 month star 12 month star
 Posts: 2
 Reputation: londoner is on a distinguished road (10)
Default Event ID 539 logged in Event Viewer

Hi all, first post here, so please sorry for the lack of etiquette. Correct me if i'm wrong.

I'm having this issue on a couple of dc's 03, they're logging in this kind of event but, the account referred in this event it's not locked out... indeed I found some replication events errors, maybe that;s the cause??

security[failure] 539 NT AUTHORITY\\SYSTEM Logon Failure:
Reason:Account locked out User Namexx Domainxx
Logon Type:3 Logon Process:NtLmSsp Authentication Package:NTLM
Workstation Namexxxx Caller User Name:- Caller Domain:- Caller
Logon ID:- Caller Process ID: - Transited Services: - Source Network
Addressxxx Source Port:0

Regards, and thanks for any hint
Londoner
  #2  
Old 29th September 2006, 15:46
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Event ID 539 logged in Event Viewer

Did you Event Id 539?
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #3  
Old 29th September 2006, 16:14
londoner londoner is offline
Casual
Casual
 
 Join Date: Sep 2006
  6 month star 12 month star
 Posts: 2
 Reputation: londoner is on a distinguished road (10)
Default Re: Event ID 539 logged in Event Viewer

Quote:
Originally Posted by biggles77
Did you Event Id 539?
yes indeed, actually i have this issue since a couple of months ago....
  #4  
Old 30th September 2006, 05:24
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Event ID 539 logged in Event Viewer

Have you tried entering the info here and seeing if MS has a solution?

Logon Type:3 Logon Process:NtLmSsp Authentication Package:NTLM
Grasping straws here since we don't know what you have done to resolve problem. Did you look in the Event Viewer for and associated events?

Also I assume (dangerous word) that the first post contained the exact event error. If so, what does the link in the error tell you about the event?
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #5  
Old 30th September 2006, 17:04
teiger teiger is offline
Moderator
 
 Join Date: Mar 2005
  6 month star 12 month star
 Location: Tzurit, Israel
 Posts: 2,687
  Send a message via MSN to teiger
 Reputation: teiger is a splendid one to beholdteiger is a splendid one to beholdteiger is a splendid one to beholdteiger is a splendid one to beholdteiger is a splendid one to beholdteiger is a splendid one to beholdteiger is a splendid one to behold (757)
Default Re: Event ID 539 logged in Event Viewer

Another useful site is www.eventid.net and take out a subscription ( I have no affiliations with the site - just a subscription)
__________________
TIA

Steven Teiger [SBS-MVP(2003-2009)]
http://www.wintra.co.il/
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Event 20209 in event viewer Uncle_Bob SBS 2000 / 2003 1 27th July 2006 03:12
AD Advice needed please Si_Pe Active Directory 7 28th June 2006 12:48
errors appear after a fresh install of exch 2003 kopal Exchange 2000 / 2003 3 22nd June 2006 14:31
Using Event Viewer on Remote Machines lilary Windows 2000 Pro, XP Pro 4 14th June 2006 15:58
Win NT Server - MSExchange Success Audits in Event Viewer Sirlarrington Windows Server 2000 / 2003 3 9th June 2004 20:03


All times are GMT +3. The time now is 04:52.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri