Event 537 is logged with status code 0xC000005E in Windows XP (908355)


The information in this article applies to:

  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Professional

SYMPTOMS

On a computer that is running Microsoft Windows XP, an event that is similar to the following may be logged in the Security log: Event ID: 537
Source: Security
Type: Failure
Audit Category: Logon/Logoff
User: NT AUTHORITY\SYSTEM
Computer: ComputerName
Description:

Logon Failure:

Reason: An error occurred during logon
User Name: User
Domain: Domain
Logon Type: 11
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: ComputerName
Status code: 0xC000005E
Substatus code: 0x0

CAUSE

This event may be logged when no logons have been cached for the user account, and the Interactive logon: Number of previous logons to cache (in case domain controller is not available) policy setting is set to 0 (zero).

RESOLUTION

You can safely ignore this event.

MORE INFORMATION

The 0xC000005E status code indicates there are no servers available to serve the logon request.

REFERENCES

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

825805 "Interactive logon: Number of previous logons to cache" Help topic contains incorrect information

Modification Type:MajorLast Reviewed:10/14/2005
Keywords:kbtshoot kbprb KB908355 kbAudEndUser
©2004 Microsoft Corporation. All rights reserved.