Why does Windows XP generate so many logon failure events?

I got the question last week, why there are so many logon failure events on Windows XP when it is not domain joined. The short answer is, by design.  (Yes, bad design.) The longer answer is that the shell team is working around the fact that there is no “tell me if this user account…

2