In an environment of NW6.5 SP5 servers we have one server on which there
were 2000 failed logins per hour, all caused by workstation objects (not
user objects).
I deleted the workstation objects causing these logins. After restart of
the workstation and a user logging in the workstation object is recreated
and usually everything is fine.
Some workstation objects after being fine for a day or two start doing the
same thing again.

Anybody have an idea?

Matthias, RRDSB