Windows 10: Event ID: 4625 Thrown while using IADs::Get method

I am using IADS::Get method to retrieve "ntSecurityDescriptor" from IADS interface. Code Snippet:HRESULT hr = S_OK;IADs* pADs = NULL;BSTR attrName = SysAllocStringL"ntSecurityDescriptor";VARIANT svar;VariantInit&svar;hr = ADsOpenObjectdn, user, pass, ADS_SECURE_AUTHENTICATION, IID_IADs, void**&pADs;if !SUCCEEDEDhr { cout << "ADsOpenObject Failed:" << hex << hr << endl; goto Cleanup;}hr = pADs->

:)

 

Event 4625

event id 4625 not been logged in servers (server 2012 r2 standard) when the failed logon attempt via rdp.

 

Event ID 4625

Hi Dangel17,

Thanks for your post in Microsoft Community.

Do you use remote or other network means to log in to the company computer?



Judging from the event ID you got, the cause of your problem is that there is currently no login server available to service the login request.



This is what we judged based on the cause of your failure and the Windows logon status code.

This is the official explanation for the incident.





I guess this computer should be in a domain and managed by an IT admin. You may need to contact your IT administrator for this failure.



Our suggestion is to try updating your Windows to see if some critical update is causing the problem.

Thanks for your patience and understanding!

Kirk | Microsoft Community Support Specialist

--------------------------------------------------

* Beware of scammers posting fake support numbers here.

* If your problem is not solved, you could reply to the post again and we would continue to provide technical support for you.

* Please check and vote this answer if it helps as it will be beneficial to more community members reading here.

 

Event 4625 keeps happening every day at (nearly) the same time

Hi,



Thank you for writing to Microsoft Community Forums.



I understand that you are getting the Event ID 4625 on your PC at a specific time.



I have been researching on this and found some information which might be helpful for you. You can refer the article

4625(F): An account failed to log on



However, as you have mentioned that the Event ID is getting triggered at a particular time there are possibilities that a task is being executed at that time interval. I would suggest you to check the task scheduler and see if any task is executed
at that time.

1. Press Windows + S key together and type
   Task Scheduler.
   
2. Now on the left hand pane click on Task Scheduler (local).
   
3. Now under Task Status select the drop down for
   Last 24 hours/Last hour and check if any task is executing at
   1 PM.
   

Please get back to us with the detailed information to assist you further.



We await your response.



Regards,

Prakhar Khare

Microsoft Community – Moderator