Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Login failure Expand / Collapse
Author
Message
Posted Saturday, October 4, 2008 11:32 PM


SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Sunday, November 16, 2014 12:08 AM
Points: 208, Visits: 433
Hi,

In SQL Server error logs I am getting this message,

Date 05/10/2008 8:18:39 AM
Log SQL Server (Current - 05/10/2008 8:18:00 AM)

Source Logon

Message
Login failed for user 'DOM\ITD-RINIA$'. [CLIENT: 10.0.12.83]

---------------------------------------------------------------------

---The login name that is given 'DOM\ITD-RINIA$' is from my local machine(but this id 'DOM\ITD-RINIA$', I dont see it any where in my machine).

This error from error log is from a terminal server, where SSIS packages are deployed. I get this message every 5 mins interval.

I tried uninstalling SQL Server 2005 from my PC and re-installing, but still getting the same message.

Any suggestions please...
Post #580808
Posted Sunday, October 5, 2008 6:18 AM


Keeper of the Duck

Keeper of the Duck

Group: Moderators
Last Login: Friday, November 14, 2014 7:14 AM
Points: 6,625, Visits: 1,876
Do you have any applications installed that would try to talk to SQL Server? Especially any apps running as Network Service? A typical culprit is a web application, like SQL Server Reporting Services (but not necessarily), which runs under IIS.


K. Brian Kelley, CISA, MCSE, Security+, MVP - SQL Server
Regular Columnist (Security), SQLServerCentral.com
Author of Introduction to SQL Server: Basic Skills for Any SQL Server User
| Professional Development blog | Technical Blog | LinkedIn | Twitter
Post #580838
Posted Monday, October 6, 2008 2:00 AM


SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Sunday, November 16, 2014 12:08 AM
Points: 208, Visits: 433
Thanks, can you please tell me where can I check for these services? and how to stop them.
Post #580936
Posted Monday, October 6, 2008 2:57 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Friday, March 13, 2009 8:02 AM
Points: 3, Visits: 24
You can use your SQL Server Configuration Manager to the check, whether these services are running or not?
Post #580958
Posted Monday, October 6, 2008 3:46 AM


SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Sunday, November 16, 2014 12:08 AM
Points: 208, Visits: 433
Thanks, all the services are runnning and using local system account as Log on, what else to check please..
Post #580975
Posted Monday, October 6, 2008 6:52 AM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: 2 days ago @ 5:56 AM
Points: 2,439, Visits: 2,976
If the login is originated from your computer and the error is captured every 5 minutes, it could be a scheduled task.
Else I suggest to look with task-manager on your local machine for running applications and processes. If you can't figure it out, killing suspected processes until you find the errors are gone.


** Don't mistake the ‘stupidity of the crowd’ for the ‘wisdom of the group’! **
Post #581054
Posted Wednesday, October 8, 2008 10:21 AM


SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Sunday, November 16, 2014 12:08 AM
Points: 208, Visits: 433
HanShi (10/6/2008)
If the login is originated from your computer and the error is captured every 5 minutes, it could be a scheduled task.
Else I suggest to look with task-manager on your local machine for running applications and processes. If you can't figure it out, killing suspected processes until you find the errors are gone.


thanks. I dont see any scheduled task, from windows.
i have also uninstalled sql server 2005 from my machine.
i checked for the task, in task manager in windows,
still getting the same logon failure:


Source Logon

Message
Error: 18456, Severity: 14, State: 11.

any suggestions...
Post #582748
Posted Wednesday, October 8, 2008 11:24 PM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: 2 days ago @ 5:56 AM
Points: 2,439, Visits: 2,976
After closing all applications, you have to look for running processes. It sure looks like you have an application running on the background (or hidden). If the failing logins also occur after a reboot, look at processes/applications that automatically start.

** Don't mistake the ‘stupidity of the crowd’ for the ‘wisdom of the group’! **
Post #583070
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse