Do you have a screenshot?
Domain administrator with several failed authentication attempts on DC
Rodrigo Catarino
0
Reputation points
Hi,
We have the "administrator" domain account disabled as the best practice says.
I have 200k+ daily failed login attempts from that user from my domain controller to the same machine.
The logon service attempt is from krbtgt/MYDOMAIN but as the account is disabled the authentication fails.
How can i validate/correct this?
Kind regards,
Rodrigo Catarino
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
7,023 questions
Windows for business | Windows Server | User experience | Other
20,219 questions
2 answers
Sort by: Most helpful
-
-
Anonymous
2023-05-18T19:44:46.4766667+00:00 There may be a better method.
--please don't forget to
upvote
andAccept as answer
if the reply is helpful--