Hello,
Please help me to resolve this issue. We have received the following error message of Lync Server generated from SCOM.
{
Alert: Lync Server Authentication Warnings
Source: ***************
Path:
Last modified by: System
Last modified time: 07.08.2013 10:02:03
Alert description: Event Description: A significant number of authentication or authorization failures have occurred on messages for the account ********* and the first attempt was from the IP address ***********. 30 failures have been identified in the last 111 minutes. There have been 30 errors in total. Note: the user uri might have been truncated to 64 characters.
Resolution:
It is recommended that this IP address be examined to determine if it should be blocked at the firewall to prevent password guessing attacks. This account may also be worth blocking with a script on the Access Edge Server to prevent continued attacks against it.
}
the SIP address of the user for which this error was generated was not present in the Lync Server ( verified from Lync Server Control Panel). and also, the user account was completely deleted and the user is retired from our internal systems.
still, we are experiencing these kind of similar errors, please help me through this.
Thanks
Regards,
KARTHIK