1 2 Previous Next 14 Replies Latest reply on Jan 3, 2012 7:54 AM by chandan_1052

    Mcafee endpoint encryption V5.2.8.9

      Hi Friend,

       

      We have multiple laptop users having the safeboot client. so i have created desired admin account for administrative purpose. but whenever i try to login with admin id it doesn't accept it. for that everytime i need to login with machine recovery. so could you please suggest me, how i can over come from this issue.

       

      Regards,

      Chandan

        • 1. Re: Mcafee endpoint encryption V5.2.8.9
          rbdudani

          are these admin accounts has been added in groups properties ?

           

          if you want perticular account in every machine than you have to add them in groups property from which you create installation set.

          • 2. Re: Mcafee endpoint encryption V5.2.8.9

            yes, that has been added in group machines.and that's been using for our IT administrative purpose, but even, we can't login with that ID. so that we had changed the password from console. after that, when we tried to login after synchornise with server, same problem was occurred.

             

            pls suggest what i can do for this issue. because everytime machine recovery methods is very painful.

            Regards,
            Chandan

            • 3. Re: Mcafee endpoint encryption V5.2.8.9
              rbdudani

              1. what is current error Message when you are trying to login ? (incoccrect password or Invalid user?)

              2. when you changed the password, are this machines online ? and sucessfuly synchornized with server ?

              • 4. Re: Mcafee endpoint encryption V5.2.8.9

                1) we are getting incorrect password. i am sure that entered password is correct.

                2) i had changed admin password from safeboot console, yes laptop was connect with our LAN,and after sync with server, i checked the log of sync.

                • 5. Re: Mcafee endpoint encryption V5.2.8.9
                  rbdudani

                  which option you have used to reset password ?

                   

                  RESET token ? or Change Token ?

                   

                  I will sugguest you to try with Change Token.

                   

                  also understand below scenario when one single user is added on multiple machines.

                   

                  1. you have added USER1 user on muliple machines

                  2. some one tried invalid attempts on XYZ machine. (not able to login and account lockedout)

                  3. You have tried to login on ABC machine and logged in with USER1

                  4. XYZ machine has been reported to you and you performed machine recvoery.

                  5. XYZ machine will boot and Synch with server once it become online and will update server about USER1 lockout  which happened earlier

                  6. Server will update all machines about account lockout once all machine synch.

                  7. on reboot of ABC machine you will not be able to login.

                   

                  Message was edited by: rbdudani on 1/2/12 5:34:44 AM CST
                  • 6. Re: Mcafee endpoint encryption V5.2.8.9

                    hi,

                     

                    i used reset token for reseting the password. i understand above scenario.  please see the below logs, you can see after 2-3 try, we can able to login with same password.  pls suggest.

                    Endpoint Encryption audit file for "administrator" (ID=000000ff)

                    01/11/2011 01:46:34 PM,0x02000002,N/A,Change password
                    01/11/2011 01:46:34 PM,0x04000002,N/A,Password changed successfully
                    01/11/2011 04:08:31 PM,0x02000001,ID=00000149\Type=00000002,Logon attempt
                    01/11/2011 04:08:31 PM,0x04000001,ID=00000149\Type=00000002,Logon successful
                    01/11/2011 04:08:40 PM,0x0400001b,ID=00000149\Type=00000002,Registered for local self recovery
                    01/11/2011 08:15:16 PM,0x02000001,ID=00000158\Type=00000002,Logon attempt
                    01/11/2011 08:15:16 PM,0x04000001,ID=00000158\Type=00000002,Logon successful
                    01/11/2011 08:18:41 PM,0x02000001,ID=00000158\Type=00000002,Logon attempt
                    01/11/2011 08:18:42 PM,0x04000001,ID=00000158\Type=00000002,Logon successful
                    01/11/2011 09:30:19 PM,0x02000001,"INMHPU2LT4016" (ID=00000150\Type=00000002),Logon attempt
                    01/11/2011 09:30:20 PM,0x04000001,"INMHPU2LT4016" (ID=00000150\Type=00000002),Logon successful
                    01/12/2011 01:06:23 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:06:23 PM,0x08000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon failed
                    01/12/2011 01:07:03 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:07:03 PM,0x08000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon failed
                    01/12/2011 01:09:05 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:09:05 PM,0x08000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon failed
                    01/12/2011 01:09:05 PM,0x08000004,"INMHPU2LT4025" (ID=00000159\Type=00000002),Password timeout
                    01/12/2011 01:17:04 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:17:04 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    01/12/2011 01:29:30 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:29:30 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    01/12/2011 01:39:37 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/12/2011 01:39:37 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    01/12/2011 02:55:11 PM,0x02000001,"INMHPU2LT4022" (ID=00000156\Type=00000002),Logon attempt
                    01/12/2011 02:55:11 PM,0x04000001,"INMHPU2LT4022" (ID=00000156\Type=00000002),Logon successful
                    01/12/2011 02:50:11 PM,0x02000001,"INMHPU2LT4020" (ID=00000154\Type=00000002),Logon attempt
                    01/12/2011 02:50:11 PM,0x08000001,"INMHPU2LT4020" (ID=00000154\Type=00000002),Logon failed
                    01/12/2011 02:50:21 PM,0x02000001,"INMHPU2LT4020" (ID=00000154\Type=00000002),Logon attempt
                    01/12/2011 02:50:21 PM,0x04000001,"INMHPU2LT4020" (ID=00000154\Type=00000002),Logon successful
                    01/12/2011 06:25:56 PM,0x02000001,ID=0000014d\Type=00000002,Logon attempt
                    01/12/2011 06:25:56 PM,0x04000001,ID=0000014d\Type=00000002,Logon successful
                    01/12/2011 06:27:37 PM,0x02000001,ID=0000014d\Type=00000002,Logon attempt
                    01/12/2011 06:27:37 PM,0x08000001,ID=0000014d\Type=00000002,Logon failed
                    01/12/2011 06:27:45 PM,0x02000001,ID=0000014d\Type=00000002,Logon attempt
                    01/12/2011 06:27:45 PM,0x04000001,ID=0000014d\Type=00000002,Logon successful
                    01/12/2011 07:39:36 PM,0x02000001,"INMHPU2LT4017" (ID=00000151\Type=00000002),Logon attempt
                    01/12/2011 07:39:36 PM,0x04000001,"INMHPU2LT4017" (ID=00000151\Type=00000002),Logon successful
                    01/12/2011 07:49:43 PM,0x02000001,"INMHPU2LT4021" (ID=00000155\Type=00000002),Logon attempt
                    01/12/2011 07:49:44 PM,0x04000001,"INMHPU2LT4021" (ID=00000155\Type=00000002),Logon successful
                    01/12/2011 08:40:37 PM,0x02000001,"INMHPU2LT4014" (ID=0000014e\Type=00000002),Logon attempt
                    01/12/2011 08:40:38 PM,0x04000001,"INMHPU2LT4014" (ID=0000014e\Type=00000002),Logon successful
                    01/12/2011 09:17:35 PM,0x02000001,ID=00000147\Type=00000002,Logon attempt
                    01/12/2011 09:17:35 PM,0x08000001,ID=00000147\Type=00000002,Logon failed
                    01/12/2011 09:17:47 PM,0x02000001,ID=00000147\Type=00000002,Logon attempt
                    01/12/2011 09:17:47 PM,0x04000001,ID=00000147\Type=00000002,Logon successful
                    01/13/2011 10:04:43 AM,0x02000001,"INMHPU2LT3042" (ID=0000015e\Type=00000002),Logon attempt
                    01/13/2011 10:04:43 AM,0x04000001,"INMHPU2LT3042" (ID=0000015e\Type=00000002),Logon successful
                    01/13/2011 11:14:07 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    01/13/2011 11:14:07 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    01/13/2011 11:22:22 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    01/13/2011 11:22:23 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    01/13/2011 11:22:35 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    01/13/2011 11:22:36 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    01/13/2011 11:23:41 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    01/13/2011 11:23:42 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    01/13/2011 11:26:00 AM,0x02000001,ID=0000015a\Type=00000002,Logon attempt
                    01/13/2011 11:26:01 AM,0x04000001,ID=0000015a\Type=00000002,Logon successful
                    01/13/2011 12:26:31 PM,0x02000001,"INMHPU2LT4016" (ID=00000150\Type=00000002),Logon attempt
                    01/13/2011 12:26:32 PM,0x04000001,"INMHPU2LT4016" (ID=00000150\Type=00000002),Logon successful
                    01/14/2011 02:53:31 PM,0x02000001,"INMHPU2LT3042" (ID=0000015e\Type=00000002),Logon attempt
                    01/14/2011 02:53:31 PM,0x04000001,"INMHPU2LT3042" (ID=0000015e\Type=00000002),Logon successful
                    01/14/2011 03:36:49 PM,0x02000001,ID=00000153\Type=00000002,Logon attempt
                    01/14/2011 03:36:49 PM,0x04000001,ID=00000153\Type=00000002,Logon successful
                    01/14/2011 03:40:25 PM,0x02000001,ID=00000153\Type=00000002,Logon attempt
                    01/14/2011 03:40:26 PM,0x04000001,ID=00000153\Type=00000002,Logon successful
                    01/14/2011 03:45:41 PM,0x02000001,ID=00000153\Type=00000002,Logon attempt
                    01/14/2011 03:45:41 PM,0x04000001,ID=00000153\Type=00000002,Logon successful
                    01/14/2011 04:54:52 PM,0x02000001,ID=00000158\Type=00000002,Logon attempt
                    01/14/2011 04:54:52 PM,0x04000001,ID=00000158\Type=00000002,Logon successful
                    01/17/2011 12:10:07 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 12:10:07 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    01/17/2011 12:54:11 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 12:54:11 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    01/17/2011 12:55:42 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 12:55:42 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    01/17/2011 12:56:45 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 12:56:46 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    01/17/2011 12:56:46 PM,0x08000004,ID=000000d6\Type=00000002,Password timeout
                    01/17/2011 12:58:03 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 12:58:03 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    01/17/2011 11:22:06 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/17/2011 11:22:06 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    01/14/2011 05:22:17 PM,0x02000001,ID=00000152\Type=00000002,Logon attempt
                    01/14/2011 05:22:17 PM,0x04000001,ID=00000152\Type=00000002,Logon successful
                    01/14/2011 05:27:51 PM,0x02000001,ID=00000152\Type=00000002,Logon attempt
                    01/14/2011 05:27:51 PM,0x04000001,ID=00000152\Type=00000002,Logon successful
                    01/14/2011 07:54:36 PM,0x02000001,ID=00000152\Type=00000002,Logon attempt
                    01/14/2011 07:54:36 PM,0x08000001,ID=00000152\Type=00000002,Logon failed
                    01/14/2011 07:54:46 PM,0x02000001,ID=00000152\Type=00000002,Logon attempt
                    01/14/2011 07:54:46 PM,0x04000001,ID=00000152\Type=00000002,Logon successful
                    01/18/2011 07:36:53 PM,0x02000001,ID=00000152\Type=00000002,Logon attempt
                    01/18/2011 07:36:53 PM,0x04000001,ID=00000152\Type=00000002,Logon successful
                    01/14/2011 05:16:49 PM,0x02000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon attempt
                    01/14/2011 05:16:49 PM,0x04000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon successful
                    01/14/2011 07:47:38 PM,0x02000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon attempt
                    01/14/2011 07:47:38 PM,0x04000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon successful
                    01/18/2011 08:10:56 PM,0x02000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon attempt
                    01/18/2011 08:10:56 PM,0x04000001,"INMHPU2LT4023" (ID=00000157\Type=00000002),Logon successful
                    01/21/2011 04:12:09 PM,0x02000001,"INMHPU2LT4031" (ID=00000170\Type=00000002),Logon attempt
                    01/21/2011 04:12:09 PM,0x04000001,"INMHPU2LT4031" (ID=00000170\Type=00000002),Logon successful
                    01/24/2011 10:07:42 AM,0x02000001,"INMHPU2LT4031" (ID=00000170\Type=00000002),Logon attempt
                    01/24/2011 10:07:42 AM,0x04000001,"INMHPU2LT4031" (ID=00000170\Type=00000002),Logon successful
                    01/24/2011 03:28:33 PM,0x02000001,ID=0000016f\Type=00000002,Logon attempt
                    01/24/2011 03:28:33 PM,0x04000001,ID=0000016f\Type=00000002,Logon successful
                    01/28/2011 12:57:05 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    01/28/2011 12:57:05 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    01/27/2011 10:22:48 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    01/27/2011 10:22:49 PM,0x04000001,ID=00000030\Type=00000002,Logon successful
                    01/28/2011 03:02:37 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    01/28/2011 03:02:38 PM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    01/28/2011 03:02:56 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    01/28/2011 03:02:56 PM,0x04000001,ID=00000030\Type=00000002,Logon successful
                    02/02/2011 01:23:37 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    02/02/2011 01:23:37 PM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    02/02/2011 01:24:32 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    02/02/2011 01:24:32 PM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    01/28/2011 07:01:43 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/28/2011 07:01:43 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    01/28/2011 07:08:59 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    01/28/2011 07:09:00 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/11/2011 09:39:15 AM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 09:39:15 AM,0x02000003,ID=000000d6\Type=00000002,Forced password change
                    02/11/2011 09:40:48 AM,0x02000002,ID=000000d6\Type=00000002,Change password
                    02/11/2011 09:40:48 AM,0x04000002,ID=000000d6\Type=00000002,Password changed successfully
                    02/11/2011 09:40:48 AM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/11/2011 10:04:33 AM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 10:04:34 AM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/11/2011 04:42:54 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 04:42:54 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/11/2011 05:15:10 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 05:15:11 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    02/11/2011 05:15:18 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 05:15:18 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    02/11/2011 05:15:34 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 05:15:34 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/11/2011 06:21:44 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    02/11/2011 06:21:45 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    02/14/2011 03:14:26 PM,0x02000001,ID=00000189\Type=00000002,Logon attempt
                    02/14/2011 03:14:26 PM,0x04000001,ID=00000189\Type=00000002,Logon successful
                    02/14/2011 03:25:31 PM,0x02000001,ID=00000189\Type=00000002,Logon attempt
                    02/14/2011 03:25:31 PM,0x04000001,ID=00000189\Type=00000002,Logon successful
                    02/18/2011 03:25:12 PM,0x02000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon attempt
                    02/18/2011 03:25:12 PM,0x08000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon failed
                    02/18/2011 03:25:21 PM,0x02000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon attempt
                    02/18/2011 03:25:21 PM,0x02000003,"INMHPU1LT0036" (ID=00000166\Type=00000002),Forced password change
                    02/18/2011 03:25:36 PM,0x02000002,"INMHPU1LT0036" (ID=00000166\Type=00000002),Change password
                    02/18/2011 03:25:36 PM,0x04000002,"INMHPU1LT0036" (ID=00000166\Type=00000002),Password changed successfully
                    02/18/2011 03:25:36 PM,0x04000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon successful
                    02/18/2011 03:38:40 PM,0x02000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon attempt
                    02/18/2011 03:38:41 PM,0x04000001,"INMHPU1LT0036" (ID=00000166\Type=00000002),Logon successful
                    02/24/2011 06:46:56 PM,0x02000001,"INMHPU1LT0037" (ID=00000167\Type=00000002),Logon attempt
                    02/24/2011 06:46:56 PM,0x04000001,"INMHPU1LT0037" (ID=00000167\Type=00000002),Logon successful
                    03/09/2011 08:10:29 PM,0x02000001,ID=000001a1\Type=00000002,Logon attempt
                    03/09/2011 08:10:29 PM,0x04000001,ID=000001a1\Type=00000002,Logon successful
                    03/09/2011 08:36:05 PM,0x02000001,ID=000001a1\Type=00000002,Logon attempt
                    03/09/2011 08:36:05 PM,0x04000001,ID=000001a1\Type=00000002,Logon successful
                    03/09/2011 08:55:53 PM,0x02000001,ID=000001a1\Type=00000002,Logon attempt
                    03/09/2011 08:55:53 PM,0x04000001,ID=000001a1\Type=00000002,Logon successful
                    03/09/2011 10:36:05 PM,0x02000001,ID=000001a1\Type=00000002,Logon attempt
                    03/09/2011 10:36:05 PM,0x08000001,ID=000001a1\Type=00000002,Logon failed
                    03/14/2011 10:27:42 AM,0x02000016,ID=0000014f\Type=00000002,Recovery started
                    03/14/2011 10:27:58 AM,0x02000002,ID=0000014f\Type=00000002,Change password
                    03/14/2011 10:27:58 AM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    03/14/2011 10:27:58 AM,0x0400001c,ID=0000014f\Type=00000002,Local self recovery successful
                    03/14/2011 10:27:58 AM,0x04000017,ID=0000014f\Type=00000002,Password reset
                    03/14/2011 10:28:23 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/14/2011 10:28:24 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/14/2011 02:03:31 PM,0x02000016,ID=00000148\Type=00000002,Recovery started
                    03/19/2011 10:29:40 AM,0x02000016,N/A,Recovery started
                    03/19/2011 10:30:13 AM,0x02000002,N/A,Change password
                    03/19/2011 10:30:13 AM,0x08000002,N/A,Password change failed
                    03/19/2011 10:30:24 AM,0x02000002,N/A,Change password
                    03/19/2011 10:30:24 AM,0x04000002,N/A,Password changed successfully
                    03/14/2011 01:50:00 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/14/2011 01:50:00 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/16/2011 10:20:11 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/16/2011 10:20:11 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/17/2011 11:25:33 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/17/2011 11:25:33 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/21/2011 10:24:49 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/21/2011 10:24:49 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/22/2011 10:29:45 AM,0x02000001,ID=000001c2\Type=00000002,Logon attempt
                    03/22/2011 10:29:45 AM,0x08000001,ID=000001c2\Type=00000002,Logon failed
                    03/22/2011 10:30:21 AM,0x02000016,ID=000001c2\Type=00000002,Recovery started
                    03/22/2011 10:30:36 AM,0x02000002,ID=000001c2\Type=00000002,Change password
                    03/22/2011 10:30:36 AM,0x04000002,ID=000001c2\Type=00000002,Password changed successfully
                    03/22/2011 10:30:36 AM,0x0400001c,ID=000001c2\Type=00000002,Local self recovery successful
                    03/22/2011 10:30:36 AM,0x04000017,ID=000001c2\Type=00000002,Password reset
                    03/22/2011 10:31:06 AM,0x02000001,ID=000001c2\Type=00000002,Logon attempt
                    03/22/2011 10:31:06 AM,0x04000001,ID=000001c2\Type=00000002,Logon successful
                    03/22/2011 12:20:38 PM,0x02000001,ID=000001c7\Type=00000002,Logon attempt
                    03/22/2011 12:20:38 PM,0x08000001,ID=000001c7\Type=00000002,Logon failed
                    03/22/2011 12:20:48 PM,0x02000001,ID=000001c7\Type=00000002,Logon attempt
                    03/22/2011 12:20:48 PM,0x08000001,ID=000001c7\Type=00000002,Logon failed
                    03/22/2011 11:59:04 AM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    03/22/2011 11:59:04 AM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    03/22/2011 11:59:22 AM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    03/22/2011 11:59:22 AM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    03/22/2011 12:00:07 PM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    03/22/2011 12:00:07 PM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    03/22/2011 12:00:07 PM,0x08000004,ID=00000030\Type=00000002,Password timeout
                    03/23/2011 12:58:21 PM,0x02000001,ID=000001bb\Type=00000002,Logon attempt
                    03/23/2011 12:58:21 PM,0x08000001,ID=000001bb\Type=00000002,Logon failed
                    03/23/2011 12:59:25 PM,0x02000016,ID=000001bb\Type=00000002,Recovery started
                    03/23/2011 12:59:39 PM,0x02000002,ID=000001bb\Type=00000002,Change password
                    03/23/2011 12:59:39 PM,0x04000002,ID=000001bb\Type=00000002,Password changed successfully
                    03/23/2011 12:59:39 PM,0x0400001c,ID=000001bb\Type=00000002,Local self recovery successful
                    03/23/2011 12:59:39 PM,0x04000017,ID=000001bb\Type=00000002,Password reset
                    03/23/2011 12:59:59 PM,0x02000001,ID=000001bb\Type=00000002,Logon attempt
                    03/23/2011 12:59:59 PM,0x04000001,ID=000001bb\Type=00000002,Logon successful
                    03/25/2011 09:34:59 AM,0x02000001,ID=000001c8\Type=00000002,Logon attempt
                    03/25/2011 09:35:00 AM,0x08000001,ID=000001c8\Type=00000002,Logon failed
                    03/25/2011 09:35:23 AM,0x02000001,ID=000001c8\Type=00000002,Logon attempt
                    03/25/2011 09:35:23 AM,0x08000001,ID=000001c8\Type=00000002,Logon failed
                    03/28/2011 01:33:58 PM,0x02000001,ID=000001b9\Type=00000002,Logon attempt
                    03/28/2011 01:33:59 PM,0x08000001,ID=000001b9\Type=00000002,Logon failed
                    03/28/2011 01:34:22 PM,0x02000016,ID=000001b9\Type=00000002,Recovery started
                    03/28/2011 01:34:42 PM,0x02000002,ID=000001b9\Type=00000002,Change password
                    03/28/2011 01:34:43 PM,0x04000002,ID=000001b9\Type=00000002,Password changed successfully
                    03/28/2011 01:34:43 PM,0x0400001c,ID=000001b9\Type=00000002,Local self recovery successful
                    03/28/2011 01:34:43 PM,0x04000017,ID=000001b9\Type=00000002,Password reset
                    03/28/2011 01:35:07 PM,0x02000001,ID=000001b9\Type=00000002,Logon attempt
                    03/28/2011 01:35:07 PM,0x04000001,ID=000001b9\Type=00000002,Logon successful
                    03/28/2011 03:08:04 PM,0x02000001,ID=000001b9\Type=00000002,Logon attempt
                    03/28/2011 03:08:04 PM,0x04000001,ID=000001b9\Type=00000002,Logon successful
                    03/20/2011 04:16:19 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/20/2011 04:16:19 PM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    03/20/2011 04:16:27 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/20/2011 04:16:27 PM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    03/31/2011 03:17:38 PM,0x02000016,ID=000001bf\Type=00000002,Recovery started
                    03/31/2011 03:18:04 PM,0x02000002,ID=000001bf\Type=00000002,Change password
                    03/31/2011 03:18:04 PM,0x04000002,ID=000001bf\Type=00000002,Password changed successfully
                    03/31/2011 03:18:04 PM,0x0400001c,ID=000001bf\Type=00000002,Local self recovery successful
                    03/31/2011 03:18:04 PM,0x04000017,ID=000001bf\Type=00000002,Password reset
                    03/31/2011 03:19:00 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 03:19:00 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 03:27:24 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 03:27:24 PM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    03/31/2011 03:27:49 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 03:27:49 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 03:38:48 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 03:38:49 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 05:46:03 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 05:46:03 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 07:00:41 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 07:00:41 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 08:51:31 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 08:51:31 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    03/31/2011 11:14:35 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    03/31/2011 11:14:35 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/01/2011 09:23:32 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/01/2011 09:23:33 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/01/2011 04:08:37 PM,0x02000001,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Logon attempt
                    04/01/2011 04:08:37 PM,0x08000001,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Logon failed
                    04/01/2011 04:09:24 PM,0x02000016,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Recovery started
                    04/01/2011 04:10:16 PM,0x02000002,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Change password
                    04/01/2011 04:10:16 PM,0x04000002,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Password changed successfully
                    04/01/2011 04:10:16 PM,0x0400001c,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Local self recovery successful
                    04/01/2011 04:10:16 PM,0x04000017,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Password reset
                    04/01/2011 04:10:39 PM,0x02000001,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Logon attempt
                    04/01/2011 04:10:39 PM,0x04000001,"INMHPU2LT5048" (ID=000001c1\Type=00000002),Logon successful
                    04/02/2011 10:01:25 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/02/2011 10:01:26 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/04/2011 08:50:35 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/04/2011 08:50:35 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/05/2011 09:40:54 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/05/2011 09:40:54 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/05/2011 12:24:57 PM,0x02000016,"INMHPU2LT5047" (ID=000001be\Type=00000002),Recovery started
                    04/05/2011 12:25:13 PM,0x02000002,"INMHPU2LT5047" (ID=000001be\Type=00000002),Change password
                    04/05/2011 12:25:14 PM,0x04000002,"INMHPU2LT5047" (ID=000001be\Type=00000002),Password changed successfully
                    04/05/2011 12:25:14 PM,0x0400001c,"INMHPU2LT5047" (ID=000001be\Type=00000002),Local self recovery successful
                    04/05/2011 12:25:14 PM,0x04000017,"INMHPU2LT5047" (ID=000001be\Type=00000002),Password reset
                    04/05/2011 12:25:33 PM,0x02000001,"INMHPU2LT5047" (ID=000001be\Type=00000002),Logon attempt
                    04/05/2011 12:25:34 PM,0x04000001,"INMHPU2LT5047" (ID=000001be\Type=00000002),Logon successful
                    04/05/2011 01:26:45 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/05/2011 01:26:45 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/06/2011 10:01:00 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/06/2011 10:01:00 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/06/2011 02:28:33 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    04/06/2011 02:28:33 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    04/06/2011 02:53:48 PM,0x02000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon attempt
                    04/06/2011 02:53:48 PM,0x04000001,"INMHPU2LT4025" (ID=00000159\Type=00000002),Logon successful
                    04/07/2011 07:59:33 AM,0x02000001,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Logon attempt
                    04/07/2011 07:59:33 AM,0x08000001,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Logon failed
                    04/07/2011 08:01:45 AM,0x02000016,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Recovery started
                    04/07/2011 08:01:59 AM,0x02000002,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Change password
                    04/07/2011 08:01:59 AM,0x04000002,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Password changed successfully
                    04/07/2011 08:01:59 AM,0x0400001c,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Local self recovery successful
                    04/07/2011 08:01:59 AM,0x04000017,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Password reset
                    04/07/2011 08:02:17 AM,0x02000001,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Logon attempt
                    04/07/2011 08:02:17 AM,0x04000001,"INMHPU2LT5052" (ID=000001bc\Type=00000002),Logon successful
                    04/06/2011 03:15:53 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/06/2011 03:15:53 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/06/2011 03:43:17 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/06/2011 03:43:17 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/06/2011 04:15:01 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/06/2011 04:15:01 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/07/2011 11:36:42 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/07/2011 11:36:43 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/07/2011 11:38:35 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/07/2011 11:38:35 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/07/2011 11:52:15 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/07/2011 11:52:15 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/08/2011 09:31:24 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/08/2011 09:31:24 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/08/2011 09:31:35 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/08/2011 09:31:35 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/08/2011 10:25:01 PM,0x02000001,"INGJAH1LP0026" (ID=000001d6\Type=00000002),Logon attempt
                    04/08/2011 10:25:01 PM,0x08000001,"INGJAH1LP0026" (ID=000001d6\Type=00000002),Logon failed
                    03/10/2011 03:07:45 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    03/10/2011 03:07:46 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    03/10/2011 03:07:51 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    03/10/2011 03:07:51 PM,0x04000001,ID=000000d6\Type=00000002,Logon successful
                    03/25/2011 09:34:14 AM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    03/25/2011 09:34:14 AM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    03/25/2011 09:34:20 AM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    03/25/2011 09:34:20 AM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    04/09/2011 09:34:50 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/09/2011 09:34:50 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/11/2011 08:59:00 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/11/2011 08:59:01 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/11/2011 10:27:22 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/11/2011 10:27:22 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/12/2011 11:22:13 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/12/2011 11:22:13 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/12/2011 12:17:08 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/12/2011 12:17:08 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/12/2011 06:36:04 PM,0x02000001,ID=00000169\Type=00000002,Logon attempt
                    04/12/2011 06:36:05 PM,0x08000001,ID=00000169\Type=00000002,Logon failed
                    04/12/2011 06:36:10 PM,0x02000001,ID=00000169\Type=00000002,Logon attempt
                    04/12/2011 06:36:10 PM,0x08000001,ID=00000169\Type=00000002,Logon failed
                    04/12/2011 06:36:10 PM,0x08000004,ID=00000169\Type=00000002,Password timeout
                    04/12/2011 06:36:53 PM,0x02000016,ID=00000169\Type=00000002,Recovery started
                    04/12/2011 06:37:08 PM,0x02000002,ID=00000169\Type=00000002,Change password
                    04/12/2011 06:37:08 PM,0x04000002,ID=00000169\Type=00000002,Password changed successfully
                    04/12/2011 06:37:08 PM,0x0400001c,ID=00000169\Type=00000002,Local self recovery successful
                    04/12/2011 06:37:08 PM,0x04000017,ID=00000169\Type=00000002,Password reset
                    04/12/2011 06:37:24 PM,0x02000001,ID=00000169\Type=00000002,Logon attempt
                    04/12/2011 06:37:24 PM,0x04000001,ID=00000169\Type=00000002,Logon successful
                    03/28/2011 11:25:11 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:25:11 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:25:46 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:25:46 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:27:54 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:27:54 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:27:54 AM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    03/28/2011 11:29:37 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:29:37 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:29:37 AM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    03/28/2011 11:31:44 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:31:44 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:31:44 AM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    03/28/2011 11:35:55 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 11:35:55 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    03/28/2011 11:35:55 AM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    03/28/2011 12:08:21 PM,0x02000016,ID=0000014f\Type=00000002,Recovery started
                    03/28/2011 12:08:34 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    03/28/2011 12:08:35 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    03/28/2011 12:08:35 PM,0x0400001c,ID=0000014f\Type=00000002,Local self recovery successful
                    03/28/2011 12:08:35 PM,0x04000017,ID=0000014f\Type=00000002,Password reset
                    03/28/2011 12:08:55 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/28/2011 12:08:55 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    03/31/2011 02:01:34 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    03/31/2011 02:01:34 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    04/11/2011 10:31:41 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/11/2011 10:31:41 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    04/11/2011 02:34:39 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/11/2011 02:34:39 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    04/13/2011 11:21:43 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/13/2011 11:21:43 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    04/13/2011 12:12:12 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/13/2011 12:12:12 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    04/13/2011 09:31:42 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/13/2011 09:31:42 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/13/2011 09:07:57 PM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/13/2011 09:07:57 PM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/14/2011 09:44:39 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/14/2011 09:44:40 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/14/2011 09:44:53 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/14/2011 09:44:53 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/15/2011 09:29:11 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/15/2011 09:29:11 AM,0x04000001,ID=000001bf\Type=00000002,Logon successful
                    04/07/2011 04:00:30 PM,0x02000016,ID=000001ba\Type=00000002,Recovery started
                    04/07/2011 04:00:56 PM,0x02000002,ID=000001ba\Type=00000002,Change password
                    04/07/2011 04:00:56 PM,0x04000002,ID=000001ba\Type=00000002,Password changed successfully
                    04/07/2011 04:00:56 PM,0x0400001c,ID=000001ba\Type=00000002,Local self recovery successful
                    04/07/2011 04:00:56 PM,0x04000017,ID=000001ba\Type=00000002,Password reset
                    04/07/2011 04:01:11 PM,0x02000001,ID=000001ba\Type=00000002,Logon attempt
                    04/07/2011 04:01:11 PM,0x04000001,ID=000001ba\Type=00000002,Logon successful
                    04/14/2011 01:13:41 PM,0x02000001,ID=000001ba\Type=00000002,Logon attempt
                    04/14/2011 01:13:41 PM,0x04000001,ID=000001ba\Type=00000002,Logon successful
                    04/15/2011 02:03:58 PM,0x02000001,ID=000001ba\Type=00000002,Logon attempt
                    04/15/2011 02:03:58 PM,0x08000001,ID=000001ba\Type=00000002,Logon failed
                    04/15/2011 02:04:34 PM,0x02000016,ID=000001ba\Type=00000002,Recovery started
                    04/15/2011 02:05:53 PM,0x02000002,ID=000001ba\Type=00000002,Change password
                    04/15/2011 02:05:53 PM,0x04000002,ID=000001ba\Type=00000002,Password changed successfully
                    04/15/2011 02:05:53 PM,0x0400001c,ID=000001ba\Type=00000002,Local self recovery successful
                    04/15/2011 02:05:53 PM,0x04000017,ID=000001ba\Type=00000002,Password reset
                    04/15/2011 02:06:06 PM,0x02000001,ID=000001ba\Type=00000002,Logon attempt
                    04/15/2011 02:06:06 PM,0x04000001,ID=000001ba\Type=00000002,Logon successful
                    04/16/2011 07:47:30 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:47:31 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:47:47 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:47:47 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:48:06 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:48:06 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:48:06 AM,0x08000004,ID=000001bf\Type=00000002,Password timeout
                    04/16/2011 07:49:22 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:49:22 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:49:22 AM,0x08000004,ID=000001bf\Type=00000002,Password timeout
                    04/16/2011 07:51:37 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:51:37 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:51:37 AM,0x08000004,ID=000001bf\Type=00000002,Password timeout
                    04/16/2011 07:56:26 AM,0x02000001,ID=000001bf\Type=00000002,Logon attempt
                    04/16/2011 07:56:26 AM,0x08000001,ID=000001bf\Type=00000002,Logon failed
                    04/16/2011 07:56:26 AM,0x08000004,ID=000001bf\Type=00000002,Password timeout
                    04/20/2011 12:02:54 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/20/2011 12:02:54 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    04/20/2011 12:03:03 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/20/2011 12:03:03 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    04/20/2011 12:03:19 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/20/2011 12:03:19 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    04/20/2011 12:03:19 PM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    04/20/2011 12:04:32 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/20/2011 12:04:32 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    04/20/2011 12:04:32 PM,0x08000004,ID=0000014f\Type=00000002,Password timeout
                    04/20/2011 12:13:26 PM,0x02000016,ID=0000014f\Type=00000002,Recovery started
                    04/20/2011 12:13:38 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    04/20/2011 12:13:39 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    04/20/2011 12:13:39 PM,0x0400001c,ID=0000014f\Type=00000002,Local self recovery successful
                    04/20/2011 12:13:39 PM,0x04000017,ID=0000014f\Type=00000002,Password reset
                    04/20/2011 12:14:44 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/20/2011 12:14:44 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/04/2011 03:01:52 PM,0x02000001,ID=000000d6\Type=00000002,Logon attempt
                    05/04/2011 03:01:52 PM,0x08000001,ID=000000d6\Type=00000002,Logon failed
                    05/06/2011 04:21:11 PM,0x02000001,ID=000001dc\Type=00000002,Logon attempt
                    05/06/2011 04:21:11 PM,0x08000001,ID=000001dc\Type=00000002,Logon failed
                    05/06/2011 04:24:43 PM,0x02000001,ID=000001dc\Type=00000002,Logon attempt
                    05/06/2011 04:24:44 PM,0x08000001,ID=000001dc\Type=00000002,Logon failed
                    05/10/2011 02:40:18 AM,0x02000001,"INGJAH1LP0036" (ID=000001dd\Type=00000002),Logon attempt
                    05/10/2011 02:40:18 AM,0x08000001,"INGJAH1LP0036" (ID=000001dd\Type=00000002),Logon failed
                    04/25/2011 10:27:43 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    04/25/2011 10:27:44 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/12/2011 12:54:33 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/12/2011 12:54:33 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    05/12/2011 12:55:00 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/12/2011 12:55:00 PM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    05/12/2011 12:55:21 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/12/2011 12:55:21 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/19/2011 01:50:27 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/19/2011 01:50:27 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/23/2011 02:23:49 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/23/2011 02:23:49 PM,0x02000003,ID=0000014f\Type=00000002,Forced password change
                    05/23/2011 02:24:10 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    05/23/2011 02:24:10 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    05/23/2011 02:24:10 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/30/2011 02:32:39 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/30/2011 02:32:39 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/30/2011 02:34:42 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/30/2011 02:34:42 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    05/30/2011 02:47:21 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/30/2011 02:47:21 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/01/2011 11:27:16 PM,0x02000001,ID=000001e2\Type=00000002,Logon attempt
                    06/01/2011 11:27:17 PM,0x08000001,ID=000001e2\Type=00000002,Logon failed
                    06/01/2011 11:27:57 PM,0x02000001,ID=000001e2\Type=00000002,Logon attempt
                    06/01/2011 11:27:57 PM,0x08000001,ID=000001e2\Type=00000002,Logon failed
                    05/01/2011 11:03:10 AM,0x02000001,ID=00000030\Type=00000002,Logon attempt
                    05/01/2011 11:03:10 AM,0x08000001,ID=00000030\Type=00000002,Logon failed
                    06/06/2011 02:34:32 PM,0x02000001,"INGJAH1LP0039" (ID=000001e3\Type=00000002),Logon attempt
                    06/06/2011 02:34:32 PM,0x08000001,"INGJAH1LP0039" (ID=000001e3\Type=00000002),Logon failed
                    06/06/2011 02:34:32 PM,0x08000004,"INGJAH1LP0039" (ID=000001e3\Type=00000002),Password timeout
                    05/31/2011 01:34:03 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    05/31/2011 01:34:03 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/01/2011 01:02:45 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/01/2011 01:02:45 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/07/2011 10:01:42 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/07/2011 10:01:42 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/07/2011 05:32:08 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/07/2011 05:32:08 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/13/2011 10:25:01 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/13/2011 10:25:01 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/13/2011 02:06:45 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/13/2011 02:06:45 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/14/2011 11:17:50 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/14/2011 11:17:50 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/20/2011 10:45:01 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/20/2011 10:45:02 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/27/2011 10:34:01 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/27/2011 10:34:01 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    06/27/2011 10:34:08 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/27/2011 10:34:08 AM,0x02000003,ID=0000014f\Type=00000002,Forced password change
                    06/27/2011 10:34:15 AM,0x02000002,ID=0000014f\Type=00000002,Change password
                    06/27/2011 10:34:15 AM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    06/27/2011 10:34:16 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/27/2011 12:17:01 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/27/2011 12:17:01 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/30/2011 10:55:14 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/30/2011 10:55:14 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    06/30/2011 04:40:48 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    06/30/2011 04:40:48 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/01/2011 10:36:52 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/01/2011 10:36:52 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/07/2011 11:43:33 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/07/2011 11:43:33 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/11/2011 01:03:35 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/11/2011 01:03:35 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/19/2011 11:26:27 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/19/2011 11:26:27 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/21/2011 11:48:21 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/21/2011 11:48:22 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/21/2011 01:55:29 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/21/2011 01:55:29 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/25/2011 01:35:45 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/25/2011 01:35:45 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/25/2011 01:35:53 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    07/25/2011 01:35:53 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    07/26/2011 05:25:25 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/26/2011 05:25:26 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    07/27/2011 09:46:25 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    07/27/2011 09:46:25 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/03/2011 09:56:21 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/03/2011 09:56:21 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/10/2011 03:59:15 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/10/2011 03:59:15 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/12/2011 10:04:31 AM,0x02000001,"INGJAH1LP0023" (ID=000001b4\Type=00000002),Logon attempt
                    08/12/2011 10:04:31 AM,0x08000001,"INGJAH1LP0023" (ID=000001b4\Type=00000002),Logon failed
                    08/11/2011 11:49:39 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/11/2011 11:49:40 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/12/2011 10:51:22 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/12/2011 10:51:22 AM,0x08000001,ID=0000014f\Type=00000002,Logon failed
                    08/12/2011 10:51:31 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/12/2011 10:51:31 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/18/2011 10:12:47 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/18/2011 10:12:47 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/18/2011 02:57:36 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/18/2011 02:57:36 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/18/2011 02:59:27 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/18/2011 02:59:28 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    09/01/2011 10:33:55 PM,0x02000001,"INGJAH1LP0011" (ID=000001f2\Type=00000002),Logon attempt
                    09/01/2011 10:33:55 PM,0x08000001,"INGJAH1LP0011" (ID=000001f2\Type=00000002),Logon failed
                    09/01/2011 10:34:24 PM,0x02000001,"INGJAH1LP0011" (ID=000001f2\Type=00000002),Logon attempt
                    09/01/2011 10:34:24 PM,0x08000001,"INGJAH1LP0011" (ID=000001f2\Type=00000002),Logon failed
                    08/27/2011 11:42:38 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/27/2011 11:42:38 AM,0x02000003,ID=0000014f\Type=00000002,Forced password change
                    08/27/2011 11:42:46 AM,0x02000002,ID=0000014f\Type=00000002,Change password
                    08/27/2011 11:42:46 AM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    08/27/2011 11:42:47 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    08/27/2011 11:45:19 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    08/27/2011 11:45:20 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    09/02/2011 09:57:39 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    09/02/2011 09:57:40 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    09/15/2011 10:48:29 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    09/15/2011 10:48:29 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    09/21/2011 02:59:50 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    09/21/2011 02:59:51 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    09/21/2011 03:00:02 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    09/21/2011 03:00:03 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    09/27/2011 02:23:26 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    09/27/2011 02:23:26 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/03/2011 10:07:45 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/03/2011 10:07:45 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/10/2011 10:07:14 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/10/2011 10:07:14 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/11/2011 11:56:43 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/11/2011 11:56:44 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/20/2011 01:02:46 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/20/2011 01:02:46 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/20/2011 01:02:56 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    10/20/2011 01:02:57 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    11/12/2011 04:38:06 PM,0x02000001,"INMHPU2LT6100" (ID=00000206\Type=00000002),Logon attempt
                    11/12/2011 04:38:06 PM,0x08000001,"INMHPU2LT6100" (ID=00000206\Type=00000002),Logon failed
                    11/12/2011 04:38:15 PM,0x02000001,"INMHPU2LT6100" (ID=00000206\Type=00000002),Logon attempt
                    11/12/2011 04:38:15 PM,0x08000001,"INMHPU2LT6100" (ID=00000206\Type=00000002),Logon failed
                    10/20/2011 04:27:15 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/20/2011 04:27:15 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    10/31/2011 10:26:57 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    10/31/2011 10:26:57 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/07/2011 11:16:09 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/07/2011 11:16:09 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/08/2011 11:08:25 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/08/2011 11:08:26 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/11/2011 10:04:36 AM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/11/2011 10:04:36 AM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/16/2011 01:29:48 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/16/2011 01:29:48 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/16/2011 01:29:59 PM,0x02000002,ID=0000014f\Type=00000002,Change password
                    11/16/2011 01:29:59 PM,0x04000002,ID=0000014f\Type=00000002,Password changed successfully
                    11/17/2011 12:18:34 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/17/2011 12:18:34 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    11/17/2011 12:21:53 PM,0x02000001,ID=0000014f\Type=00000002,Logon attempt
                    11/17/2011 12:21:53 PM,0x04000001,ID=0000014f\Type=00000002,Logon successful
                    01/02/2012 05:04:25 PM,0x02000016,N/A,Recovery started
                    01/02/2012 05:04:36 PM,0x02000002,N/A,Change password
                    01/02/2012 05:04:36 PM,0x04000002,N/A,Password changed successfully

                    • 7. Re: Mcafee endpoint encryption V5.2.8.9
                      rbdudani

                      when you are chaging pasword of above user, you are changing it to new one ? or to previous one ?

                       

                      are you using the SSO on client Machines ? can you send machines SSO options detials ?

                       

                      this problem suddenly started ? or you struggling with it since beggining when you started ?

                       

                      How many machines are infacted ? I mean this problem is on selected machines ? or random machines ?

                      • 8. Re: Mcafee endpoint encryption V5.2.8.9

                        i have change the password as previous, no we aren't using SSO on client machine.

                         

                        This problem is happening from begining. there are 46 machines are infacted with same issue, as our team reporting this issue whenever they are facing such this kind of issue.

                         

                        Regards, Chandan

                        • 9. Re: Mcafee endpoint encryption V5.2.8.9

                          could you pls give the knowledge base docs for SSO. as that's not implemented in our organisation.

                          1 2 Previous Next