Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
demonbane
Starting Member
10 Posts |
 Posted - 2004-10-15 : 14:21:24
|
| Hello Everyone,I'm having a puzzling problem. After reviewing my sql logs I see this entry every 1 to 5 minutes. Login failed for user 'NT AUTHORITY\SYSTEM'.I have checked all my jobs and they run under the sa account. I have checked both the sql server and sql agent service accounts and they start under a domain account that is also a local server administrator and a sql server administrator as well. I have not linked servers either.I did remove the BUILTIN\Administrator account a couple of days ago but I ruled that out as a cause since the problem has been occurring for over a month now and I removed the BUILTIN\Administrator sql account five days ago.I'm pretty much stumped now. Anyone else run into this before?Jerry |
|
|
Kristen
Test
22859 Posts |
Posted - 2004-10-16 : 03:02:31
|
| Am I right in thinking that SQL Profiler will show you what is attempting to log in as 'NT AUTHORITY\SYSTEM' - hopefully once you know that you can work it back from there.Might be a hack attempt, or some job you've forgotten about!Kristen |
 |
|
|
|
|
|
Login failed for user 'NT AUTHORITY\SYSTEM'.