Logon audit failure in Devices and Printers
I have been tracking down a security audit logon failure, and I found it - here is what is going on. In Windows Server 2008 R2, If I open Devices and Printers, right click on any of the Printers, click Printer Properties, then click the Sharing tab, I get 2 logon audit failures - one by explorer.exe trying to logon as Guest, and one by printui.exe trying to logon as Guest. Guest account is disabled which is why the audit failure occurs. Why is this happening, why does Devices and printers try to logon as Guest? I periodically get some temporary event logs that shared printers are not available, I am wondering if it's connected to this because something can't be performed. Should this be changed to another account? BTW, this happens even if I am logged in as a Domain Admin. (BTW - system is AV/spyware free, I run HijackThis, spybot, and at least one other).
April 19th, 2010 4:52pm

Does anyone have any thoughts about this? Have I posted this in the correct forum or should I look for an answer in another forum here? Thanks! FYI This is repeatable every time on my Win2K8 box, on my laptop using Win 7 it does not occur - and Guest is disabled there too. How can I fix this? Thanks!
Free Windows Admin Tool Kit Click here and download it now
April 20th, 2010 1:53pm

FYI I have tagged a dialog window to come up when this audit failure occurs, and it comes up regularly when I click around in folders within Windows Explorer. Any help is greatly appreciated, thanks.
April 20th, 2010 3:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics