TopicWindows Server →
Event ID 4625 — Logon failure
What does this error mean?
Windows recorded an attempt of authentication failed.
Probable causes
- incorrect password
- account locked
- service using an old secret
Verification and resolution
- Read Logon Type and Status/Sub (2005)
- Identify Source Network Address
- Correlate with 4740 if locking
Precaution: Many errors can signal an obsolete registered password or attack.