Approved: Fortect
Over the past few days, some of our readers have encountered known error code event ID 529, login process, login type advapi 2. This issue is caused by a number of factors. We will talk about this below.
Ariz onConnection type 2: Interactive. The Logon Type = 2 event occurs whenever a user logs in (or tries to log in) locally on a healthy, trusted computer, such as when entering a user ID and password at a Windows logon prompt. Logon type = 2 events occur even if the user logs on with a traditional account or a domain account.Arizona
Windows Security Log Event ID 529
529: Login failed – unknown username or incorrect password
On this important side
- Description of this event
- Field Details
- Examples
- Discuss this process event
- Mini-seminars on this situation
Event 529 is logged on a workstation or server to which the user was unable to connect.
A type record can be usedlog to determine if the user was present on this computer or elsewhere on a particular network. The following connection types are possible:
Connection type |
Description |
2 |
Interactive (keyboard and screen connection from the system) Windows 2000 registers a Terminal Services connection, that is, this type, not type 10. |
3 |
Network (i.e. an organization on a shared folder on this computer away from another network or IIS connection – never connected from 528 to W2k and therefore not communicated. See event 540) |
4 |
Batch (i.e. tracked task) |
5 |
Service (start service) |
7 |
Unlock (i.e. automatic workspace with password protected screensaver) |
8 |
NetworkCleartext (Logging in with credentials sent in plain text. Most often refers to logging in to IIS with “Basic Authentication”.) See this study for more information. |
Approved: FortectFortect is the world's most popular and effective PC repair tool. It is trusted by millions of people to keep their systems running fast, smooth, and error-free. With its simple user interface and powerful scanning engine, Fortect quickly finds and fixes a broad range of Windows problems - from system instability and security issues to memory management and performance bottlenecks. 9 |
New Connection Information |
10 |
RemoteInteractive (Terminal Services, Remote Desktop, or Remote Assistance) |
11 |
CachedInteractive (log in using cached domain credentials, such as when you log in to a laptop when you are offline) |
Randy’s Free Security Magazine Resources
- Free quick view of the security log
- Windows Events Collection: Free Supercharger
- Free solution for auditing Active Directory changes
- Free Course: Secrets of Security Logs
Fields O Writings In 529
- Username:
- Domain:
- Connection type:
- Registration procedure:
- Authentication Package:
- Workplace name:
The following branches will be added to Windows Server 2003
- Caller Username:
- Caller’s domain:
- Caller ID:
- Caller Process ID:
- Services transferred to:
- Source network address:
- Source Port: