Hi James,
I have this problem too, just the Vista computer. Switching on this
computer generates 4 loggings on the PDC. The only thing I have found
out is:
"Check the User ID field. Most events generated by computer accounts
are safe to ignore. Determine the reason for the authentication failure
by checking Failure Code. TGT failures are usually due to a bad password
or time synchronization between workstation and domain controller. If
Failure Code indicates a bad password, how many failures exist for the
same account? Look at the client IP address. Is an innocent user error
or malicious attack indicated. If practical contact user regarding their
recent logon attempts."
In other words, in our case it's safe to ignore these failure messages.
What I don't quite understand is that there is no real solution or
workaround, if a message is safe to ignore why log it in the first
place.
Anyhow, I'll keep looking and post it when I find out how to solve this
one.
--
ned