Security Event Log: Event ID 680
The information in this article applies to:
- GFI EventsManager 2010
- GFI EventsManager 7
- GFI EventsManager 8
- GFI LANguard Security Event Log Monitor 3
- GFI LANguard Security Event Log Monitor 4
- GFI LANguard Security Event Log Monitor 5
Article ID: KBID001739
Description:
- Logon attempt by: %1
Logon account: %2
Source Workstation: %3
Error Code: %4
Importance:
- Medium/Low
- Password changed or Windows Noise
Detailed Description:
Microsoft Windows XP attempts a limited logon for each account that is displayed on the Welcome screen to determine whether to prompt the user for a password. An attempted logon is logged for each account displayed. To resolve this problem, obtain the latest service pack for Windows XP. To prevent these events from being logged, disable the Welcome screen and use the classic logon screen or turn off auditing of logon events.
This even may be generated because it is possible that auto-login was enabled and the password was changed, resulting in XP going to a login prompt to get a valid username or password.
Possible causes of this event are:
(1) When Windows XP attempts a limited logon for each account that is displayed on the Welcome screen to determine whether to prompt the user for a password.
(2) Because auto-login was enabled and the password was changed, resulting in XP going to a login prompt
More Information:
Legend: Kerberos 5 Error Codes
Related Links:
Microsoft Support Article: Failure Events Are Logged When the Welcome Screen Is Enabled