Bad Hyper-V username logon attempt

[inkostin]

Summary: This event records a failed user logon attempt. The combination of username, password and permissions is the mechanism by which Hyper-V server authenticate a user for access and authorize the user to perform activities
Cause: Failed logons are due to no match existing between the provided username and password
Resolution: Check for some automated process that might be logging in with the incorrect or expired password


How to solve a problem? Event 4625?

Server 2016, VBR - 9.5.0.1922.Update3a.

[PTide]

Hi,

For the start I would find the machine that is attempting to logon. Please check this article for details:

<...>Network Information:

Workstation Name [Type = UnicodeString]: machine name from which logon attempt was performed.

Source Network Address [Type = UnicodeString]: IP address of machine from which logon attempt was performed.

IPv6 address or ::ffff:IPv4 address of a client.

::1 or 127.0.0.1 means localhost.<...>

Thanks!

[inkostin]

Delete, please. Thanks.