sql server clustering: Hello,

I have a Windows 2003 Cluster running SQL Server 2000 SP4 in an
Active/Passive configuration. There are 2 physical nodes and only a single
virtual SQL Server Instance in the cluster. There are also 2 Terminal
Servers in an NLB cluster at the front end that are running the software that
accesses the SQL databases at the back end. We are using SQL Authentication
for any access to the SQL server from the TS servers running our application
software.

The problem (or so it would seem) is that we are getting hundreds of Failure
Audit events similar to the following logged in the Security Log of the
cluster:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 11/28/2005
Time: 11:18:29 AM
User: NT AUTHORITY\SYSTEM
Computer: CN1A
Description:
Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: ÐùÆ
Authentication Package: NTLM
Workstation Name:
Status code: 0x80090302
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Please note the strange "Logon Process:" name. All of the events have
strange Logon Process names (basically gibberish), although they are not all
identical. There are about 5-10 different gibberish Logon Process names that
get logged in
different events.

Can anybody help me to determine what is causing these logon Failures?

I have not been successfuly at finding any help via Google.

Thanks in Advance,

Sorry Mike, I got nothing!!

Jon

[quoted text, click to view]