Error 537 Security
Contents |
name 537: Logon failure - The logon attempt failed for other reasons. On this page Description of this event Field level details
Event Id 537 0xc000005e
Examples Discuss this event Mini-seminars on this event Thanks toIsaac at event id 537 status code 0xc00006d Prism Microsystems (EventTracker) for this explanation: Event ID 537 is a generic logon failure that most of the event id 537 status codes time that I've seen it has a blank user name, to figure out what the true underlying cause of the logon failure you need to look at the Status Code
Status Code: 0xc000006d Substatus Code: 0x0
and Substatus Code in the description. The codes that I see most often when talking to customers is: Status code: 0xC000006D Substatus code: 0xC0000133 These 2 codes indicate that the workstation clock is more than 5 mins out of sync with the Domain Controller. I have put together a blog entry on how to analyze event 537. Here's a link
Windows Event 537
to the status codes at MSDN Free Security Log Quick Reference Chart Description Fields in 537 User Name: Domain: Logon Type: Logon Process: Authentication Package: Workstation Name: The following fields are added in Windows Server 2003: Caller User Name: Caller Domain: Caller Logon ID: Caller Process ID: Transited Services: Source Network Address: Source Port: Top 10 Windows Security Events to Monitor Examples of 537 Event Type: Failure Audit Event Source: Security Event ID:537 User:NT AUTHORITY\SYSTEM Computer: DC1 Description: Logon Failure: Reason: An error occurred during logon User Name: Domain: Logon Type: 3 Logon Process: Kerberos Authentication Package:Kerberos Workstation Name: - Status code: 0xC000006D Substatus code:0xC0000133 Caller User Name:- Caller Domain: - Caller Logon ID: - Caller Process ID:- Transited Services: - Source Network Address:192.168.1.144 Source Port: 0 Keep me up-to-date on the Windows Security Log. Email*: Bad email address *We will NOT share this Mini-Seminars Covering Event ID 537 Top 6 Security Events You Only Detect by Monitoring Workstation Security Logs Discussions on Event ID 537 • Event : 537 - Blank user name Upc
360 games PC games an error occured during logon 0xc000006d Windows games Windows phone games Entertainment All Entertainment
Event Id 537 Logon Type 3
Movies & TV Music Business & Education Business Students & educators security:529 Developers Sale Sale Find a store Gift cards Products Software & services Windows Office Free downloads & security Internet https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=537 Explorer Microsoft Edge Skype OneNote OneDrive Microsoft Health MSN Bing Microsoft Groove Microsoft Movies & TV Devices & Xbox All Microsoft devices Microsoft Surface All Windows PCs & tablets PC accessories Xbox & games Microsoft Lumia All https://support.microsoft.com/en-us/kb/327889 Windows phones Microsoft HoloLens For business Cloud Platform Microsoft Azure Microsoft Dynamics Windows for business Office for business Skype for business Surface for business Enterprise solutions Small business solutions Find a solutions provider Volume Licensing For developers & IT pros Develop Windows apps Microsoft Azure MSDN TechNet Visual Studio For students & educators Office for students OneNote in classroom Shop PCs & tablets perfect for students Microsoft in Education Support Sign in Cart Cart Javascript is disabled Please enable javascript and refresh the page Cookies are disabled Please enable cookies and refresh the page CV: {{ getCv() }} English (United States) Terms of use Privacy & cookies Trademarks © 2016 Microsoft
(עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered by: Error 537 Failure Audit Event Windows Server > Windows Server General https://social.technet.microsoft.com/Forums/windowsserver/en-US/594d3aaf-05a9-4ecc-99b9-4c2dc79e7a56/error-537-failure-audit-event?forum=winservergen Forum Question 0 Sign in to vote I keep getting a 537 Event on http://answers.microsoft.com/en-us/windows/forum/all/error-537-cannot-install-security-update-for/0d6f2ecc-f540-486a-9765-ed4163c4adaa every PC on the network Logon Failure Reason: An error Occurred during logon User Name: XXXX Domain: XXX Logon Type: 11 Logon Porcess: User32 Authentication Package: Negotiate Workstation Name: XXX Staus Code: 0xc000005E Substatus cod 0x0 ** First I thought of the Clock being off but they are not. Monday, December 12, 2011 1:42 event id PM Reply | Quote Answers 0 Sign in to vote You can safely ignore this error, see Microsoft knowledge base article here http://support.microsoft.com/kb/908355/en-us Regards Milos Marked as answer by Elytis ChengModerator Monday, December 19, 2011 8:21 AM Monday, December 12, 2011 1:57 PM Reply | Quote 0 Sign in to vote Hi, I'd like to confirm the OS version. This event may be logged when no logons have been event id 537 cached for the user account, and the Interactive logon: Number of previous logons to cache (in case domain controller is not available) policy setting is set to 0 (zero). The 0xC000005E status code indicates there are no servers available to serve the logon request. You can safely ignore this event. In addition, There is a hotfix about Windows Xp to fix this issue: Unnecessary Event ID 537 Entries in the Security Log http://support.microsoft.com/kb/327889 Hope this helps! Best Regards Elytis ChengPlease remember to click “Mark as Answer” on the post that Elytis Cheng TechNet Community Support Marked as answer by Elytis ChengModerator Monday, December 19, 2011 8:21 AM Tuesday, December 13, 2011 1:37 AM Reply | Quote Moderator All replies 0 Sign in to vote Hello, You have to check the time difference between your client computers and your DCs. If the difference is more that 5 minutes then, by default, it will cause Kerberos failures. Make sure that: Port 123 is not blocked The PDC Emulator is available Clients computers are using NT5DS for time sync:http://technet.microsoft.com/en-us/library/bb490845.aspxANDhttp://support.microsoft.com/kb/223184 I would recommend making the PDC Emulator syncing time with a public NTP server:http://www.ehow.com/how_5981545_configure-windows-ntp-client.html This posting is provided "AS IS" with no warranties or guarantees ,
be down. Please try the request again. Your cache administrator is webmaster. Generated Sat, 08 Oct 2016 16:09:50 GMT by s_ac4 (squid/3.5.20)