event log - logon failure

English support forum

Moderators: Hacker, petermad, Stefan2, white

Post Reply
User avatar
mosvath
New Member
New Member
Posts: 1
Joined: 2004-12-22, 16:37 UTC

event log - logon failure

Post by *mosvath »

Hello

I have just installed Totalcmd on a pc and I found some event log entries later. No plugins, no addons. Totalcmd was running but I didn't work with it during that time. The entries can be seen below.

Is it normal that totalcmd is trying to do something with Guest user ID?

Regards,
Mark

Account For Which Logon Failed:
Security ID: NULL SID
Account Name: Guest
Account Domain: WIN-97G8UP0OBMS


Failure Information:
Failure Reason: Account currently disabled.
Status: 0xc000006e
Sub Status: 0xc0000072

Process Information:
Caller Process ID: 0x1060
Caller Process Name: C:\totalcmd\TOTALCMD.EXE

Network Information:
Workstation Name: WIN-97G8UP0OBMS
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
User avatar
karlchen
Power Member
Power Member
Posts: 4605
Joined: 2003-02-06, 22:23 UTC
Location: Germany

Post by *karlchen »

Hello, mosvath.

A freshly installed Total Commander, no plugins, no addons, will never try to authenticate as user guest anywhere unless explicitly instructed to do so.

Is the computer named "WIN-97G8UP0OBMS" really your own workstation?

Kind regards,
Karl
MX Linux 21.3 64-bit xfce, Total Commander 11.50 64-bit
The people of Alderaan keep on bravely fighting back the clone warriors sent out by the unscrupulous Sith Lord Palpatine.
The Prophet's Song
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50930
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Did you try to access some server in network neighborhood? TC will try to login (using WNetAddConnection3) using the default credentials.
Author of Total Commander
https://www.ghisler.com
Post Reply