Hi,
we have the following error message in the logs on our DC:
User Name | *********** |
Client IP Address | 192.168.**.** |
Client Host Name | srv-opm.***.******* |
Domain Controller | SRV-****.****.***** |
Logon Time | 11-Jun-2015 15:53:26 CEST |
Event Type | Failure |
Failure Reason | Bad password |
Logon Service | krbtgt/***.****** |
Record number | 159534680 |
Failure Code | 0x18 |
Event Code | 16 |
Event Number | 4771 |
SID | %{S-1-5-21-476138262-1171983993-4202591527-500} |
Remarks | Kerberos pre-authentication failed. |
Domain | krbtgt/*****.******** |
After a long search we find out the the ProcessID is the java.exe thats running on the OPManager.
The event log WMI on the DC show this error:
EventID 5858
Id = {4C1B5704-9FA5-0007-A378-1B4CA59FD001};
ClientMachine = SRV-OPM;
User = ---\----; ClientProcessId = 1924; Component = Unknown; Operation = Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT NTLMAuthentications FROM Win32_PerfRawData_NTDS_NTDS ;
ResultCode = 0x80041017; PossibleCause = Unknown
When we stop the OPManager we get no errors. Did someboady have an idea?