Houston Security User Group

 View Only

  • 1.  Application Event Log Error

    Posted Nov 10, 2009 11:05 AM
    The SEPM database is on a seperate server. I am getting errors on the Application Event Log.

    Type:    Audit Failure
    Source:    MSSQLSERVER
    Event ID:    18456
    Event Time:    11/10/2009 9:50:44 AM
    User:    n/a
    Computer:    Database_Server_Name
    Description:
    Login failed for user 'SEPM_Account'. [CLIENT: IP_Address]

    The account is not lock out. I do not see any logon errors in the Security log. This error is filling up the SQL logs. When I look in the SEPM I do not notice that any data is not updateing. Anyone have any ideas.


  • 2.  RE: Application Event Log Error

    Posted Nov 10, 2009 11:16 AM
    This might help you out.

    https://www-secure.symantec.com/connect/forums/sepm-sql-failure-audits


  • 3.  RE: Application Event Log Error

    Posted Nov 10, 2009 11:16 AM
     Try Stopping All the services for SQL server and SEPM..
    Then Start SQL services and then Start SEPM service...
    Check if recycling the services help..


  • 4.  RE: Application Event Log Error

    Posted Nov 10, 2009 11:34 AM
    I should have mentioned this is my original post. Both the SEPM and SQL server have both been rebooted. Both servers are very current on their patch levels. I have two SEPM's. The databases reside on two seperate SQL servers. The databases are set up for mixed mode authintication. One is getting this error and the other does not.