Resolution
fact
Security Manager 3.X
fact
Security Manager 4.X
fact
Security Manager 5.X
symptom
Explanation of the 5002 event and multiple logon violations.
note
A person does not have to physically login to a machine to generate these logon failures. Example: A user maps a drive on their workstation to a server on the network. Later the user changes their password but the drive is still mapped with the old password. Every time the user logs in, the drive will attempt to map using the old credentials multiple times in a matter of seconds which can cause this alert to fire.
Security Manager 3.X
fact
Security Manager 4.X
fact
Security Manager 5.X
symptom
Explanation of the 5002 event and multiple logon violations.
note
A person does not have to physically login to a machine to generate these logon failures. Example: A user maps a drive on their workstation to a server on the network. Later the user changes their password but the drive is still mapped with the old password. Every time the user logs in, the drive will attempt to map using the old credentials multiple times in a matter of seconds which can cause this alert to fire.
Additional Information
Formerly known as NETIQKB4748