Merge pull request #10316 from HerbertMauerer/patch-5

event ID wrong.
This commit is contained in:
Denise Vangel-MSFT
2022-01-26 13:31:07 -08:00
committed by GitHub

View File

@ -12,7 +12,7 @@ ms.author: dansimp
manager: dansimp manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
ms.date: 01/24/2022 ms.date: 01/26/2022
ms.reviewer: ms.reviewer:
--- ---
@ -33,7 +33,7 @@ The following known issue has been fixed in the [Cumulative Security Update for
Failure occurred in LogonUserExEx. <br> Failure occurred in LogonUserExEx. <br>
User Action: Ensure the credentials for the task are correctly specified. <br> User Action: Ensure the credentials for the task are correctly specified. <br>
Additional Data: Error Value: 2147943726. 2147943726: ERROR\_LOGON\_FAILURE (The user name or password is incorrect)." Additional Data: Error Value: 2147943726. 2147943726: ERROR\_LOGON\_FAILURE (The user name or password is incorrect)."
- When enabling NTLM audit on the domain controller, an Event ID 8004 with an indecipherable username format is logged. You also get a similar user name in a user logon failure event 4525 with error 0xC0000064 on the machine itself. For example: - When enabling NTLM audit on the domain controller, an Event ID 8004 with an indecipherable username format is logged. You also get a similar user name in a user logon failure event 4625 with error 0xC0000064 on the machine itself. For example:
> Log Name: Microsoft-Windows-NTLM/Operational > Log Name: Microsoft-Windows-NTLM/Operational
Source: Microsoft-Windows-Security-Netlogon Source: Microsoft-Windows-Security-Netlogon
Event ID: 8004 Event ID: 8004