I am experiencing numerous login failures on one of my servers. So far I have deduced that the attempt is local, from another server on my domain. what I am trying to do is find some application that will tell me what application is causing this failed login. I know from the logs what account the application is using I have tried to use netstat -ano but thte PID it shows is 0 which doesn't help me narrow down what is causing this. Any help would be most appreciated! Thanks in advance.

Hi, I would like to confirm what login failure did you encounter, account lockout or others? What error message was encountered? If this is an account lockout issue, please refer to the following Microsoft TechNet articles for how to troubleshoot it: Troubleshooting Account Lockout http://technet.microsoft.com/en-us/library/cc773155(WS.10).aspx Maintaining and Monitoring Account Lockout http://technet.microsoft.com/en-us/library/cc776964(WS.10).aspx Troubleshooting account lockout the PSS way http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx Account Lockout and Management Tools http://www.microsoft.com/download/en/details.aspx?DisplayLang=en&id=18465 If this is not the issue, please clarify the issue in detail. Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.