Hi!
i readed other topics about event id 4625, but not find for my situation.
Sometimes for some users in internal network, then they start Outlook (2010,2013,2016) authentication on exchange failed with next error:
An account failed to log on.Subject:
Security ID: SYSTEM
Account Name: exchangeservername$
Account Domain:domain
Logon ID: 0x3E7
Logon Type:8
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: SamAccountName@domain.ru
Account Domain:exchangeservername
Failure Information:
Failure Reason:Unknown user name or bad password.
Status: 0xC000006D
Sub Status: 0xC0000064
Process Information:
Caller Process ID:0x31e0
Caller Process Name:C:\Windows\System32\inetsrv\w3wp.exe
Network Information:
Workstation Name:exchangeservername
Source Network Address:*removed*
Source Port: 46354
Detailed Authentication Information:
Logon Process:Advapi
Authentication Package:Negotiate
Transited Services:-
Package Name (NTLM only):-
Key Length: 0
EventID 4625
Successfully authentication happens with user name, like domain\username. Not with username@domain.
We have outlook anywhere virtual folders with NTLM authentication for internal clients and Negotiate for external. We have different names for internal and external clients, and i sure, that external OutlookAnywhere virtual directory is not accessable from internal network.
That can be reason?