We are currently running three seperate training environments with MOSS 2007 and SQL Server 2005 on a Windows Server 2003 platform.
Recently the following errors have begun popping up in the SQL logs (192.168.0.2 is the MOSS-server):
Login failed for user 'DOMAIN\user001'. [CLIENT: 192.168.0.2] Error: 18456, Severity, State: 11.
We have currently found no pattern or logic whatsoever as to why these errors occur. They seem to be completely random and have no connection to user rights.
User002 are both in the same domain group but only User001 generates errors, so far. Also, some users have generated errors only once, others more often. No user is continuosly generating errors.
We havent been able to replicate this error, pratially because none of the users experience any errors on their side so it's nigh impossible to track down what they did in that exact moment the error log was written. We have created several test accounts and done some random work in the portal in order to provoke an error but none of our test accounts have generated errors so far.
Eventhough the end user isn't bothered by it, we are still concerned that it may lead to greater problems. Also, it not exactly natural for a service to generate errors if nothing's wrong. Anyone have any ideas?