1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Event viewer # 529 and 680 How to fix?

Discussion in 'Windows XP' started by Alicia J, 2005/10/09.

  1. 2005/10/09
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    Ever since I put a password on for accessing my system, (Been on there since a day or two after buying computer) under security I get Failure Audit # 529 Logon/Log off and #680 account logon.

    I'm using XP SP2 Home Edition only one account on it. (I know bad idea to run as Administrator). Anyway, is there a way to fix this? Or edit the registry so I don't see it? I remember reading an MS article a very looong time ago, but it's a little foggy.
     
  2. 2005/10/10
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Easiest if you can show us exactly what you are seeing.

    Open an event, click on the icon below the up/down arrows to send a text copy to your clipboard, and paste the results here. Do one 529 & one 680 if the are all identical. If there is variation, then a few samples of each one.
     
    Newt,
    #2

  3. to hide this advert.

  4. 2005/10/10
    skeet6961

    skeet6961 Inactive

    Joined:
    2005/09/03
    Messages:
    522
    Likes Received:
    0

    ignore them. this is normal if u'r using the welcome screen

    read here:

    http://support.microsoft.com/kb/q305822/
     
    Last edited: 2005/10/10
  5. 2005/10/10
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    Event Type: Failure Audit
    Event Source: Security
    Event Category: Account Logon
    Event ID: 680
    Date: 10/10/2005
    Time: 9:50:45 AM
    User: NT AUTHORITY\SYSTEM
    Computer: TRIXIE
    Description:
    Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
    Logon account: Alicia & Dianna
    Source Workstation: TRIXIE
    Error Code: 0xC000006A


    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    -----------------------------------------------------------------
    Event Type: Failure Audit
    Event Source: Security
    Event Category: Logon/Logoff
    Event ID: 529
    Date: 10/10/2005
    Time: 9:50:45 AM
    User: NT AUTHORITY\SYSTEM
    Computer: TRIXIE
    Description:
    Logon Failure:
    Reason: Unknown user name or bad password
    User Name: Alicia & Dianna
    Domain: TRIXIE
    Logon Type: 2
    Logon Process: Advapi
    Authentication Package: Negotiate
    Workstation Name: TRIXIE

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    ------------------------------------------------------
    I guess I could ignore it, but I was just wondering if there was a way to get rid of it.
     
  6. 2005/10/10
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Thanks for posting those. Confirmed exactly what is happening.

    Did you look skeet6961's posted link to the Microsoft article? It offers several suggestions for stopping those events.
     
    Newt,
    #5
  7. 2005/10/11
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    I am not sure where this is located in Home Edition. Also I find it curious that they say this has been 'corrected' in SP1 I don't want to stop all the events being recorded, just wanted to know if it was possible to startup without getting these two errors. A real 'fix' instead of MS 'correction.' :)

    --------------------------------------------------------------------------

    1. Click Start, click Run, type gpedit.msc, and then click OK.
    2. In the left pane, expand the following items:• Local Computer Policy
    • Computer Configuration
    • Windows Settings
    • Security Settings
    • Local Policy


    3. Click Audit Policy.
    4. Double-click Audit Logon Events.
    5. Click to clear the Success and Failure check boxes.
    6. Click OK.
    7. Close the Group Policy window.

    STATUS
    This behavior is by design. This problem was first corrected in Windows XP Service Pack 1.
    MORE INFORMATION
    If an account lockout policy is enabled, it is possible for an account to get locked out. The failed logon count will be reset when the user successfully logs on. However, since this happens to each account whenever the Welcome Screen is displayed, if the account lockout policy is set to 3 failed attempts, and User A logs in 3 times in a row, User B will have 3 failed attempts and the account will be locked out.

    APPLIES TO
    • Microsoft Windows XP Professional Edition
    --------------------------------------------------------------------------
     
  8. 2005/10/12
    skeet6961

    skeet6961 Inactive

    Joined:
    2005/09/03
    Messages:
    522
    Likes Received:
    0

    turn off the welcome screen and they go away.
     
  9. 2005/10/12
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    I'll do that. Thanks for the info. For some reason I thought you couldn't have a password without the welcome screen. :eek:
     
  10. 2005/10/12
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Alicia - sorry. My goof for not reading your first post and noting that you were running the home version.

    Gpedit.msc is not available for Home and the pro version will not work on home.
     
    Newt,
    #9
  11. 2005/10/12
    skeet6961

    skeet6961 Inactive

    Joined:
    2005/09/03
    Messages:
    522
    Likes Received:
    0

    not sure if u do or don't have a password but ... i'd highly recommend u DO have one regardless ;)

    my advice = IF u like the welcome screen, leave it as is and just ignore the log entries as they are meaningless w/ welcome screen on.
     
  12. 2005/10/13
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    Already decided to just leave well enough alone after mucking around. Yes I do have a password, and I am keeping it. :)

    Thanks for your help guys.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.