title: Audit Failure, Credential Validation 4776
body: <p>The logon events for the same are successful. The audit failure problem is with only 4776 events. Can someone help to resolve this? The avmgr is domain account. Same is used for accessing ms sql server database.  </p>
  
  <p>Audit Failure: </p>
  
  <p>Log Name:      Security
  Source:        Microsoft-Windows-Security-Auditing
  Date:          8/7/2013 4:17:06 AM
  Event ID:      4776
  Task Category: Credential Validation
  Level:         Information
  Keywords:      Audit Failure
  User:          N/A
  Computer:      abc.xyz.pqr
  Description:
  The computer attempted to validate the credentials for an account.</p>
  
  <p>Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Logon Account:  avmgr
  Source Workstation: abc
  Error Code: 0xc0000064
  Event Xml:</p>
  
  <pre><code>&lt;Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"&gt;
    &lt;System&gt;
      &lt;Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" /&gt;
      &lt;EventID&gt;4776&lt;/EventID&gt;
      &lt;Version&gt;0&lt;/Version&gt;
      &lt;Level&gt;0&lt;/Level&gt;
      &lt;Task&gt;14336&lt;/Task&gt;
      &lt;Opcode&gt;0&lt;/Opcode&gt;
      &lt;Keywords&gt;0x8010000000000000&lt;/Keywords&gt;
      &lt;TimeCreated SystemTime="2013-08-06T22:47:06.052490200Z" /&gt;
      &lt;EventRecordID&gt;9460344&lt;/EventRecordID&gt;
      &lt;Correlation /&gt;
      &lt;Execution ProcessID="540" ThreadID="2996" /&gt;
      &lt;Channel&gt;Security&lt;/Channel&gt;
      &lt;Computer&gt;abc.xyz.pqr&lt;/Computer&gt;
      &lt;Security /&gt;
    &lt;/System&gt;
    &lt;EventData&gt;
      &lt;Data Name="PackageName"&gt;MICROSOFT_AUTHENTICATION_PACKAGE_V1_0&lt;/Data&gt;
      &lt;Data Name="TargetUserName"&gt;avmgr&lt;/Data&gt;
      &lt;Data Name="Workstation"&gt;abc&lt;/Data&gt;
      &lt;Data Name="Status"&gt;0xc0000064&lt;/Data&gt;
    &lt;/EventData&gt;
  &lt;/Event&gt;
  </code></pre>