Audit failure 4776 as Windows recognize domain account as a local account and think the account doesn't exist

Question

Hi,

I've a Windows server which's running VEEAM B&R and this VEEAM connect to the vCenter server with domain account. The event log shows the audit failure event with detail below

Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account: veeamprod2.svc
Source Workstation: *
Error Code: 0xC0000064

*The source workstation is this server itself. the logon account veeamprod2.svc is actually a domain account

Have anyone experienced this before?

Thank you.

Answer 1

ello

Thank you for your question and reaching out. I can understand you are having query\issues related to Audit failure with event ID 4776.

0xC0000064 = The username you typed does not exist. Bad username. Hene ,Please verify that username is configured in correct format in VEEAM software , For example serviceaccount@keyman .local or domain.local\ serviceaccount

Reference :

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4776

------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--