Running SBS 2011. dont laugh. It's paid for. If you must know I keep it for the exchange server. I rebuilt this server in 2014 to upgrade hardware - since that time (I think the very first day) I've been logging and error that a user account 'test' on my domain fails a password. I get 2 messages, one in Net POlicy Server says 'auth - PAP - "Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect." the other is more generic about a failed login to the security log.
I have 13.5 Million error messages for this. Now you can laugh.
The msg comes every 30 seconds exactly. I disabled every service I can and look to disrupt the message. It continues to come even with 90% of the automatic services disabled. I scanned the registry for the user account value. It's not there either.
Just to prove it's local to the box, I disconnect the box from the local net - message continues. I don't get enough information to determine the source application causing this. And nothing is broken I'm aware of on the unit. (well. recently my SSL unified cert expired but that was just a few weeks ago and I haven't purchased a new one).
The server performs fine. I can't think of any other way to trace this back to it's source. Anyone have any suggestions?
I have no idea but maybe you should install Process Explorer