The port numbers are different each time, but always above 40,, at least of the ones I've checked so far. Do you have any application on I had to check on , and saw that Xsan uses it. So if there's an Apple device trying to access a file system But given the ephemeral port range, that may not be a certainty by any means.
Is there anything in the corresponding event log on Computer-Name which says something failed? AV is cloud based, not looking to the server.
We do have a server based business app, but it is not running after business hours when some of these events occur. In the client computer, event Success Audit targeting the server occurs in the Security log, then 2 seconds later the server records Event Audit Failure from the client. Still sifting through the events, but so far haven't seen a failure on the client corresponding to the Event on the server.
On the client machine, Event A logon was attempted using explicit credentials occurs with this data:. I checked the cached credentials in Credential Manager on the client machine, but there were none cached.
I confirmed with the Task Scheduler GUI and the command line schtasks that there are no tasks running at the times these events are occurring. If the process is svchost. There are usually multiple instances of svchost. Oh, okay, I have learned something here. Thanks for that. During business hours I don't have console access to the machine in question.
I know that is the Remote Procedure Call service, facilitating some type of network communication, but not familiar with it. Going to Google. Thanks for the help. This has answered the original question of what is making the login attempt on the client machine. I'll probably start another post about what, on the client, is triggering the RPC attempt.
I came across this thread and the symptoms sound eerily similar to my issue. The logon attempts have since stopped, however, I never did find the root cause. That way when the task runs, it will pass the credentials to the remote machines hosting the UNC and grant it access to store the backup there. The user I was logged in with had the same username as the UNC share I was going to so I just changed the password for the local account to be the same as what the UNC share required and scheduling worked fine.
Thanks for the help! Even though the GUI has dropdowns, it will let you hand enter durations other than in the list. Though I agree, the CLI is much quicker for setting up many servers all at once.
So, less than once per day, i. You can do that in the wizard, you select daily then on the next screen it asks "every x days". If you have an irregular schedule, you would need to probably create additional trigger events that correspond to some repeatable pattern. MikeAWood: Mate, I think we might be talking of different things. When a Windows Backup job is scheduled, that backup job is added to the task scheduler in Windows. Wizard or CLI So if you have an abnormal backup schedule for backup, you can change it from the task scheduler.
Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Podcast Making Agile work for data science. Stack Gives Back Featured on Meta. New post summary designs on greatest hits now, everywhere else eventually. Related 1. When I attempt to access the desktop through the homegroup tab in Windows Explorer, I can view the libraries, but I cannot view the contents.
When I attempt to access the desktop through the Network tab in Windows Explorer, Windows Security prompts me for a network user name and password Logon failure: unknown user name or bad password. I can still stream content from the desktop through Windows Media player, and the desktop can access the laptops.
I have already reset the wireless network, created a new homegroup, and reset the Windows Security settings to their default, and the problem has persisted. All three computers are running AVG Free anti-virus software, so that shouldn't be an issue. If anybody has any ideas on how to fix the problem, I would greatly appreciate it.
This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread. I have the same question 3. Report abuse. Details required :.
0コメント