Windows Security Log Event ID 5168

5168: Spn check for SMB/SMB2 fails.

On this page

• Description of this event
• Field level details
• Examples
• Discuss this event
• Mini-seminars on this event

Spn check for SMB/SMB2 fails.

This event is related to Extended Protection for Authentication in the Server service. SMB hardening. KB article

This event is new to Windows 2008 Release 2 and Windows 7. It does not appear in earlier versions of Windows.

We have not been able to produce this event.

Free Security Log Resources by Randy

• Free Security Log Quick Reference Chart
• Windows Event Collection: Supercharger Free Edtion
• Free Active Directory Change Auditing Solution
• Free Course: Security Log Secrets

Description Fields in 5168

Subject:
 Security ID:  %1
 Account Name:  %2
 Account Domain:  %3
 Logon ID:  %4

SPN: 
 SPN Name:  %5
 Error Code:  %6

Server Information:
 Server Names:  %7
 Configured Names:  %8
 IP Addresses:  %9

Supercharger Free Edition

 

Discussions on Event ID 5168 Ask a question about this event

 

Upcoming Webinars Correlating Vulnerability Scans with Network Path Analysis to Find and Remediate the Biggest Risks to Your Network and Avoid Wasting Time on the Little Ones Getting all Your Security Information Into One Place and Searching It Like Google Regulating Privileged Access: When to Require Human Approval Workflows WSUS vs. SCCM: Which is the best way to go for security patching? XPath Deep Dive: Building Advanced Filters for Windows Event Collection Top 5 Ways for Analyzing Entitlements and Identifying High-Risk

Additional Resources Security Log Quick Reference Chart

•	All Event IDs
•	Audit Policy