Event Details
User Activity->Logons->Failed Logons->Windows 2000-2003->EventID 534 - Logon Failure - The user has not been granted the requested logon type at this machine [Win 2003]
EventID 534 - Logon Failure - The user has not been granted the requested logon type at this machine [Win 2003]
 Sample:
Event Type:     FailureAudit
Event Source:   Security
Event Category: Logon/Logoff
Event ID:       534
Date:           10/26/2009 12:00:00 AM
Time:           07:31:56
User:           NT AUTHORITY\SYSTEM
Computer:       DC1
Description:    
Logon Failure:

	Reason:	The user has not been granted the requested

		logon type at this machine

	User Name:	Paul

	Domain:		RESEARCH

	Logon Type:	2

	Logon Process:	seclogon

	Authentication Package:	Negotiate

	Workstation Name:	DC1

	Caller User Name:	Alebovsky

	Caller Domain:	RESEARCH

	Caller Logon ID:	(0x0,0x59DF36)

	Caller Process ID:	880

	Transited Services:	-

	Source Network Address:	-

	Source Port:	-
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: Security
Filtering Field Equals to Value
OSVersion Windows 2003
Source Security
Category Logon/Logoff
EventId 534
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 12/14/2009 6:59:09 AM
Who Account or user name under which the activity occured. User Name Paul
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Logon" Logon
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Workstation Name DC1
Severity Specify the seriousness of the event. "High" High
WhoDomain Domain RESEARCH
WhereDomain -
Result Successful or Failed. "Failed" Failed
Failure Reason Failure Reason - Bad user name or password, not enough privileges, etc. "The user has not been granted the requested logon type at this machine" The user has not been granted the requested logon type at this machine
Comments
You must be logged in to comment