Some places to look: http://www.eventid.net/display.asp?eventid=681&source=security John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: o.e [mailto:oevans@xxxxxxxxxxxxxxx] > Sent: Wednesday, January 07, 2004 8:58 AM > To: [ExchangeList] > Subject: [exchangelist] Permission using POP3 on exchange 2000 > > http://www.MSExchange.org/ > > Hi; > I have a user coming in through a vpn connection. This computer account > is not setup on the domain. However the user account and e-mail exists. > When the user access his e-mail the following message appears in the logs: > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 681 > Date: 10/6/2003 > Time: 9:00:51 PM > User: NT AUTHORITY\SYSTEM > Computer: srv1 > > Description: > The logon to account: user@xxxxxxxxxx > by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 > from workstation: srv1 failed. The error code was: 3221225572 > > The user can access all files on the network including e-mails, but this > messgae is bugging the hell out of me. Any ideas how to solve this. > I checked Technet but it didn't give me a solution. > > Thanks in advance > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------