I get a logon failure: unknown user or bad password error
|Article:TECH16969|||||Created: 2006-08-23|||||Updated: 2007-08-30|||||Article URL http://www.symantec.com/docs/TECH16969|
When I attempt to audit a system, I get a "System error 1326: Unknown user or bad password". I can remote logon to the target system using the same credentials. Why am I getting this error?
The 1326 error is a Microsoft error. In this case, the credentials being used were a local account, not a domain account. SecurityExpressions assumes domain credentials unless the local account is specified. To specify the local credentials, use the system name or IP before the username when entering the credentials.
For example, if the username is jsmith and the system is testsystem then to use the local account the credentials would be entered as testsystem\jsmith.
Article URL http://www.symantec.com/docs/TECH16969