Hundreds of Audit Failure Event 4776 logged by unknown users

hi,

my dc reporting thousand of event id 4776 every 30seconds.

the computer attempted validate credentials account.

authentication package: microsoft_authentication_package_v1_0

logon account: sales  (this can admin, administrator, john, mary, etc.)

source workstation: dc

error code: 0xc0000064

-------

-

system

- provider [ name] microsoft-windows-security-auditing [ guid] {54849625-5478-4994-a5ba-3e3b0328c30d}

eventid 4776

version 0

level 0

task 14336

opcode 0

keywords 0x8010000000000000

- timecreated [ systemtime] 2014-01-10t07:56:59.120273200z

eventrecordid 90264197

correlation

- execution [ processid] 488 (this lsass.exe) [ threadid] 4196

channel security

computer the same computer

security

-

eventdata

packagename

microsoft_authentication_package_v1_0

targetusername

sales

workstation

the same computer

status

0xc0000064 guys how troubleshoot stop happening? thanks

user name not found, ie sales not available on domain.

there must services run "sales" account.

check proxy configured, ie user names etc.

---

arnav sharma | facebook | twitter please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Security