hi, running 2008 R2 SP1 file server. I'm seeing repeated event id 4625 audit failures in the security log. The computer account is trying to remotely connect to itself. account name is the computername$ and the workstation name is the same file server computer. I'm seeing this every second. No process id is provided: Where can I start with this one? I cannot say when it started or what changed before this happened. Thanks, rudif Failure Information: Failure Reason: An Error occured during Logon. Status: 0xc000006d Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: -

..and in what way is your problem related to Exchange? I guess not, so I recommed that you re-post your question in a forum for Windows Server. See: http://social.technet.microsoft.com/Forums/en-US/category/windowsserver Martina Miskovic

it's not. I thougth I was in the server admin group. thanks for the link. rf_admin