Logon Failure ID 529

[Eaglemb]

Just changed the Admin password on 4 NT Server boxes (previous admin departure). All went well except on a SQL box. Keep getting 529 Logon Failure types 2,3,4 & 5. Logon Process is Advapi in the Security Event Log. Administrator is the user ID. At least 2 or 3 an hour. All my services are running as expected. Any thoughts on how to track where this logon attempt is originating from?

 

[Voyager1]

According to

http://www.EventID.net

(a very very cool website B-)) this is a logon failure with a correct account but bad password. Makes perfect sense based on what you posted.

Also, according to the site, the workstation name attempting the logon should be listed in the details of the error record.

There are three Microsoft articles referenced in this write-up. I haven't looked, but you might want to check these out:

Q174073, Q174074, Q272594

Hope this helps - Bill

"You can get anything you want out of life, if you'll just help enough other people get what they want" - Zig Ziglar

 

[Eaglemb]

Thanks for the references

 

[ShackDaddy]

This is probably being caused by the fact that some of the services on the machine are configured to run in the context of the Administrator account. When the password changed, the services which are using the Admin account context will start to cause the errors you are seeing. Go to Control Panel\Services and open each service one by one and reset the passwords for the services that are logging on with the Administrator account.

If you don't find anything there, it may be a username/password set within your SQL configuration. Which version of SQL are you running?

ShackDaddy

 

[Eaglemb]

ShackDaddy,

Have already gone thru the services and changed any 'admin' logins to the new password.

I am running SQL 7 SP3 on an NT 4 box.