I am seeing a very odd list of events on a 2008 server, I have two coresponding events the TSCM 1149 and Security 4625. The Terminal services event shows a user authentication succeeded. While the security event shows account failed to log on. I have seen no errors or other issues, logs or anything that would indecate that they were sucessfull in actually entering the system. I am unsure how to read these events.
~http : // social.technet.microsoft.com/Forums/getfile/290712 ~
~http : // social.technet.microsoft.com/Forums/getfile/290713 ~