NT Authority\SYSTEM question?

[MavrickStl]

I am new to NT Admin world. I see event 529 in my event log:

event: 529
User: NT AUTHORITY\SYSTEM
TYPE: Failure\Audit

Description:

Reason: Unknown user name or bad password
UserName: pdcpatrol
logon type: 3

Under Deccription I not only see pdcpatrol but other UserName like: ARCServe

I have no clue what is going on.....I did change my NT admin password few months ago, but I am not sure if these event logs were there or I started getting them after I changed the NT Admin password. Any help in this regard would be highly appreciated.

Mav

 

[djhawthorn]

Go into Control Panel, and into the Services applet, and look for the service pertaining to ARCServe, and click on "Startup" - check who the service starts as.

If the user that runs the service is DOMAIN\pdcpatrol, you may like to (re)type in the password, as chances are it is not being able to start due to a login failure.