JSI Tip 9822. Windows XP logs Security Event 537 with status code 0xC000005E?

Jerold Schulman

October 17, 2005

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Your Windows XP Security event log contains an entry similar to:

Event ID: 537Source: SecurityType: FailureAudit Category: Logon/LogoffUser: NT AUTHORITYSYSTEMComputer: Description:Logon Failure:Reason: An error occurred during logonUser Name: Domain: Logon Type: 11Logon Process: User32Authentication Package: NegotiateWorkstation Name: Status code: 0xC000005ESubstatus code: 0x0

This behavior will occur if there are no available domain controllers (Status Code 0xC000005E) and the Interactive logon: Number of previous logons to cache (in case domain controller is not available) policy is set to 0.

If no domain controllers are available, you can You can safely ignore this event, you can safely ignore this event.

NOTE: See tip 7134 The Windows XP SP1 and Windows Server 2003 help topic for 'Interactive logon: Number of previous logons to cache' is incorrect?



Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like