I have a high failed login count from a local server on the server.
When I change the admin password, I now get a high failed account on
the admin account on the local server. I suspect its the CIFS service,
but not sure. Is there an easy way to figure out where the failed
logins are coming from. As far as I know everything works, and we are
not experiencing any problems except with the failed login count on
Health Monitoring.