| Glenn F. Henriksen 2002-10-31, 8:23 am |
| Hi!
It appears that whenever another Exchange server (external and belonging to
another domain) sends an email to my Exchange an event ID 529 appears in my
security log.
Source: Security Type: Failure
Category: Logon/logoff Event ID 529
User: NT AUTHORITY\SYSTEM
Computer : <my exchange computer>
Descrription:
Logon Failure:
Reason: Unknown user name or bad password
User Name: <REMOTE EXCHANGE SERVER>$
Domain: <REMOTE EXCHANGE SERVER DOMAIN>
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: <REMOTE EXCHANGE SERVER>
It looks like the remote exchange server is trying to authenticate to my
exchange server with his computer account. Of course, this does not work
since they are in different domains with no contact.
This event is seriously filling up my event log. Is there anything I can do
to get rid of it?
Regards,
Glenn F. Henriksen
|