This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SophosUpdateMgr - Pre-authentication failed messages in event log

Hi All

Event logs on my Servers are filling up with this error (for a whole range of different addresses) but I can't determine why. Our workstations seem to be updating OK from the Enterprise Console.

Pre-authentication failed:
    User Name:   SophosUpdateMgr
    User ID:        MyDomain\SophosUpdateMgr
    Service Name:   krbtgt/MyDomain
    Pre-Authentication Type:   0x0
    Failure Code:   0x19
    Client Address:    x.x.x.x

Any clues?

Thanks

This thread was automatically locked due to age.

0 QC over 12 years ago

Hello Autotype,
guess the subsequent login of SophosUpdateMgr is ok. There are many potential causes and I can't say which is the most likely one. Do you see this for other accounts as well? And which server and clients OSs are involved?
Christian
:43611
Cancel
Vote Up 0 Vote Down

Cancel
0 Autotype over 12 years ago

Hi Cristian
There are hundreds of these events and still occuring. Yes I can see this message generated from other accounts but the ratio is hugely in favour of SophosUpdateMgr.
Desktops generating logs events all appear to be Win7. AD Server is 2003.
Thanks
:43619
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 12 years ago

Hello Autotype,
that's expected behaviour :smileywink: - please see EventID 675 Failure Code 0x19 on Microsoft's Technet.
The ratio should be no surprise though as this account is used by all your clients at regular intervals.
HTH
Christian
:43621
Cancel
Vote Up 0 Vote Down

Cancel