Active Directory authentication security events from Classification VM
Applies to
- Active Directory (AD)
- Classification (Data Classification, Classification Data Sense)
Issue
- AD security logs are being reported related to events with ID 4776 and status code 0xc0000064, indicating user logon with misspelled or bad user account.
