Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59702
User Name:
Session ID: 0x340008000051
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 67 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 3484 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:12:20 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000800004D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 66 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000049
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 65 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000045
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 64 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000041
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 63 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000800003D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 62 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000039
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 61 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000035
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 60 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000031
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 59 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000800002D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 58 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000029
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 57 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000025
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 56 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000021
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 55 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000800001D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 54 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000001
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 53 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000005
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 52 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340008000009
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 51 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400007D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 50 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000079
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 49 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000075
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 48 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000071
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 47 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400006D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 46 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000069
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 45 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000065
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 44 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000061
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 43 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400005D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 42 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000059
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 41 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000055
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 40 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000051
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 39 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400004D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 38 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000049
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 37 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000045
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 36 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000041
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 35 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400003D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 34 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000039
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 33 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000035
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 32 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000031
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 31 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400002D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 30 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000029
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 29 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000025
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 28 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000021
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 27 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000400001D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 26 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000001
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 25 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000005
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 24 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340004000009
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 23 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000007D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 22 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000079
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 21 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000075
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 20 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000071
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 19 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000006D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 18 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000069
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 17 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000065
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 16 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000061
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 15 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000005D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 14 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000059
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 13 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000055
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 12 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000051
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 11 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000004D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 10 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000049
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 9 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000045
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 8 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000041
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 7 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000003D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 6 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000039
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 5 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000035
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 4 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000031
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 3 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4836 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x34000000002D
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 2 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4020 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SMB Session Authentication Failure
Client Name: \\10.222.0.53
Client Address: 10.222.0.53:59681
User Name:
Session ID: 0x340000000029
Status: There are currently no logon servers available to service the logon request. (0xC000005E)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation
Guidance:
You should expect this error when attempting to connect to shares using incorrect credentials.
This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.
This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled | 551 | 2 | | 2 | 551 | 0 | 580964351930793992 | 1 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Security | 4 | 4832 | n-h1-806131-1.cbci-806131-1.local | S-1-5-18 | 8/26/2021 5:11:49 PM | | | microsoft-windows-smbserver/security | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |