Microsoft KB Archive/273499

= Description of Security Event 681 =

Article ID: 273499

Article Last Modified on 3/1/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q273499



SUMMARY
When you try to audit logon events on a Windows 2000-based domain controller (DC) and a failed logon attempt is made from a down-level client or through a trust with a down-level domain, a &quot;Failure Audit&quot; event with an event ID of 681 may be logged in the Security Event log. Note that the source of the event is &quot;Security&quot;. This article contains descriptions of the various error codes that are listed in the event description.



MORE INFORMATION
Note that the error codes in the Event Log message are in decimal form, but they are actually hexadecimal values. You can translate the values from decimal to hexadecimal by using the Calculator tool in Windows 2000, or by viewing the following table. The most common error codes you may receive are defined in the following table:

Keywords: kbinfo KB273499

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.