Failed logon event generated even when OpManager monitors the device using correct credential
https://support.microsoft.com/en-us/kb/2816192
Symptoms
Consider the following scenario:
You have two or more computers running Windows.
The computers are setup in a workgroup or domain environment.
You run a remote WMI query using an application that makes WMI calls from one computer to another computer.
In this scenario, if you review the Security log on the remote computer you will notice an Event ID 4625 with regards to failure audit events for failed logon with bad username or password. You will also note that subsequently there is a successful logon with the credentials specified on the remote WMI query.
Cause
This is due to the fact that pass-through authentication is always attempted first even if specific credentials are specified in the tool being used.
Resolution
You can safely ignore the error message.
New to ADSelfService Plus?
Related Articles
Device discovered as unknown even through configured with SNMP credential in OpManager
Issue: Device discovered as unknown even after adding the SNMP read community. Reason: The device may not be configured properly with SNMP or OpManager is not configured properly with device SNMP community. Resolution: You may check for the ...AD Monitors Shows N/A in OpManager
This problem could due to the following reasons: 1)WMI is not configured properly in OpManager (OpManager uses WMI credential to monitor AD servers). 2)Required Monitors are not associated to the device in OpManager. 3)WMI might not be responding to ...MSSQL Monitors not working - Shows N/A in OpManager
This problem could due to the following reasons: 1)WMI is not configured properly in OpManager (OpManager uses WMI credential to monitor MSSQL servers). 2)Required Monitors are not associated to the device in OpManager. 3)WMI might not be responding ...Creating performance monitors
Difference between SNMP monitors and Traps
S.No SNMP Monitors Traps 1 Pull Model: OpManager sends SNMP request to the SNMP agent running on the monitored device and receives the response. Push Model: Monitored device(SNMP agent) sends messages in the form of traps to the trap ...