![]() ![]() Assuming Process Monitor was running when the event was generated, we can look for events occurring just before “2:47:13.009094300” in Process Monitor: ![]() How do we know which line triggered the above event? The trick is to get the exact time (timestamp) from the error’s Details tab, or from the Event Xml above. ![]() Sysinternals Process Monitor generates thousands of lines per second. IPv6 is installed on the machine and it is set to obtain an address automatically but there is no IPv6 DHCP server on the network. It’s interesting that the Source Network Address is the Link-local IPv6 address. Source: Microsoft-Windows-Security-Auditingįailure Reason: An Error occured during Logon. ![]()
0 Comments
Leave a Reply. |