Event Details
User Activity->Logons->Failed Logons->Windows 2000-2003->EventID 533 - Logon Failure - User not allowed to logon at this computer [Win 2003]
EventID 533 - Logon Failure - User not allowed to logon at this computer [Win 2003]
 Sample: 
Event Type:     FailureAudit
Event Source:   Security
Event Category: Logon/Logoff
Event ID:       533
Date:           10/26/2009 12:00:00 AM
Time:           07:39:57
User:           NT AUTHORITY\SYSTEM
Computer:       DC1
Description:    
Logon Failure:

	Reason:		User not allowed to logon at this computer

	User Name:	Paul

	Domain:		RESEARCH

	Logon Type:	2

	Logon Process:	seclogon

	Authentication Package:	Negotiate

	Workstation Name:	DC1

	Caller User Name:	Alebovsky

	Caller Domain:	RESEARCH

	Caller Logon ID:	(0x0,0x59DF36)

	Caller Process ID:	880

	Transited Services:	-

	Source Network Address:	-

	Source Port:	-
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: Security
Filtering Field Equals to Value
OSVersion Windows 2003
Source Security
Category Logon/Logoff
EventId 533
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 12/14/2009 6:59:09 AM
Who Account or user name under which the activity occured. User Name Paul
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Logon" Logon
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Workstation Name DC1
Severity Specify the seriousness of the event. "High" High
WhoDomain Domain RESEARCH
WhereDomain -
Result Successful or Failed. "Failed" Failed
Failure Reason Failure Reason - Bad user name or password, not enough privileges, etc. "User not allowed to logon at this computer" User not allowed to logon at this computer
Comments
You must be logged in to comment