Existent local host account generate Event ID 4776, Error Code 0xC0000064 on Active Directory events

Question

Good afternoon.

On some hosts, we have a certain service that needs to run from a specific user, for privilege reasons.

The user have admin privileges and was created as local account.

And its use is to run the following service from an open source tool.

The service starts correctly and no errors occur. Checking the events on the local machine, no failures related to this account are found. The software works correctly.

However, when checking the events in the active directory, audit failure events are found. The events always have the same characteristics: Event ID 4776 and Error Code 0xC0000064.

Is this normal behaviour? Is it possible to do something to fix this?

Thank you.

Answer 1

Hello

Thank you for posting in Q&A forum.

This error means that your Domain doesn't know this account.

Error Code Description

0xC0000064 the username you typed does not exist. Bad username.

If ocs14500 is a local account, then it is normal for domain doesn't know this user. you can ignore this massage if it works fine.

For this, you can use a domain account to do the same thing account ocs14500 do to see if error will disappear.

4776(S, F) The computer attempted to validate the credentials for an account. - Windows 10 | Microsoft Learn

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it