cancel
Showing results for 
Search instead for 
Did you mean: 

AD Security Failure Code 0x19

miked_
Contributor

AD Security Failure Code 0x19

We get these codes logged in our domain controller from the SA2000, they dont seem to be impacting anything, and we have been getting them ever since install, years ago, starting with the 4.0 code base. At the time the integrator said it was normal....Well, throwing it out there to you all...... the 0x19 code stands for "additional pre-authenticaion required"

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 675
Date: 2/22/2010
Time: 1:59:20 PM
User: NT AUTHORITY\SYSTEM
Computer: TLxx
Description:
Pre-authentication failed:
User Name: sa2000$
User ID: (domain)\sa2000$
Service Name: krbtgt/AD Domain Name
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: IVE IP address


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

2 REPLIES 2
Mrkool_
Super Contributor

Re: AD Security Failure Code 0x19

well does your sa2000$ account have all the appropriate admin rights? or is it a domain admin? If it is not than it could be that sa2000$ is not able to join the domain and giving a pre authentication failure and you will not see any side effects of this issue if you are not using any AD group to role mapping.

miked_
Contributor

Re: AD Security Failure Code 0x19

The sa2000 is the computer account that the SA self creates for AD authentication. "sa2000" is just the name we choose to give it, i believe the default is ivename. we have tried deleting the account and renaming it and then deleting the account, but none of that had any impact.