Event-o-Pedia EventID 673 - Service Ticket Granted [Win 2000]

	Event Details
	User Activity->Logons->Successful Logons->Windows 2000-2003->EventID 673 - Service Ticket Granted [Win 2000]

EventID 673 - Service Ticket Granted [Win 2000]

Linked Event:

EventID 673 - Service Ticket Granted [Win 2000]

Sample:

        Event Type:     Success Audit
        Event Source:   Security
        Event Category: Account Logon
        Event ID:       673
        Date:           11/13/2009
        Time:           11:32:54
        User:           NT AUTHORITY\SYSTEM
        Computer:       DCCC1
        Description:
        Service Ticket Granted:
        User Name:		DCCC1$
        User Domain:		LOGISTICS.CORP
        Service Name:		DCCC1$
        Service ID:		{S-1-5-21-746137067-343818398-839522115-1003}
        Ticket Options:		0x40810010
        Ticket Encryption Type:	0x17
        Client Address:		127.0.0.1

Log Type:

Windows Event Log

Uniquely Identified By:

Log Name:

Security

Filtering Field	Equals to Value
OSVersion	Windows 2000
Category	Account Logon
Source	Security
EventId	673

Field Matching

Field	Description	Stored in	Sample Value
When	At what date and time a user activity originated in the system.	DateTime	1/1/2000
Who	Account or user name under which the activity occured.	User Name	DCCC1$
What	The type of activity occurred (e.g. Logon, Password Changed, etc.)	"Kerberos Service Ticket Operations"	Kerberos Service Ticket Operations
Where	The name of the workstation/server where the activity was logged.	Computer	DC1
Where From	The name of the workstation/server where the activity was initiated from.	Client Address	127.0.0.1
Severity	Specify the seriousness of the event.	"High"	High
WhoDomain		User Domain	LOGISTICS.CORP
WhereDomain		-
Result	Successful or Failed.	"Successful"	Successful
Failure Reason		"Successful"	Successful