IBM Support

QRadar: WinCollect fails to authenticate in a Windows 2012 domain environment, 0xc000006e status code reported

Troubleshooting


Problem

When using WinCollect, users might experience an issue with failed authentications when the even though the username and password are correct.

Symptom

Here is an example of the Audit Failure event you might see on the system where WinCollect is installed:

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006e
Sub Status: 0xc000006e


Microsoft usually provides a Sub Status code that provides more detail on the reason for the failure, but in this case, you get the same 0xc000006e code for both Status and Sub Status.

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"WinCollect","Platform":[{"code":"PF033","label":"Windows"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
16 June 2018

UID

swg22013201