We just added an Windows Vista Ultimate compute to our Windows 2003
domain. Now our PDC will log these failure audits every so often for
the Vista machine. Anyone have any ideas?

Pre-authentication failed:
User Name: COMPUTERNAME$
User ID: DOMAINNAME\COMPUTERNAME$
Service Name: krbtgt/DOMAINNAME.LOCAL
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: 192.168.1.65

Hi James,

I have this problem too, just the Vista computer. Switching on this
computer generates 4 loggings on the PDC. The only thing I have found
out is:

"Check the User ID field. Most events generated by computer accounts
are safe to ignore. Determine the reason for the authentication failure
by checking Failure Code. TGT failures are usually due to a bad password
or time synchronization between workstation and domain controller. If
Failure Code indicates a bad password, how many failures exist for the
same account? Look at the client IP address. Is an innocent user error
or malicious attack indicated. If practical contact user regarding their
recent logon attempts."

In other words, in our case it's safe to ignore these failure messages.
What I don't quite understand is that there is no real solution or
workaround, if a message is safe to ignore why log it in the first
place.

Anyhow, I'll keep looking and post it when I find out how to solve this
one.


--
ned