Net Watcher Audit Log Shows Two Entries for Failed Password (105277)



The information in this article applies to:

  • Microsoft Windows for Workgroups 3.11

This article was previously published under Q105277

SYMPTOMS

The Net Watcher event log may show a duplicate entry for each failed attempt to connect to one of your resources. Each entry shows the exact same Date/Time, Computer, User, Share, Type, Access, Document, and Event.

CAUSE

When the Windows for Workgroups redirector on the client machine receives a message that the attempt to connect failed due to an invalid password, the redirector tries to establish the connection again using your logon password. In this situation, the server sees two logon attempts and logs them both in the Net Watcher event log.

Modification Type:MajorLast Reviewed:10/10/1999
Keywords:KB105277