ADFS 3.0 Event ID 4625 | An Error occurred During Logon | Status: 0xC000035B

we're getting these random errors on our adfs security logs, how can track down generating them?

an account failed log on.    subject:  	security id:		null sid  	account name:		-  	account domain:		-  	logon id:		0x0    logon type:			3    account logon failed:  	security id:		null sid  	account name:		  	account domain:		    failure information:  	failure reason:		an error occured during logon.  	status:			0xc000035b  	sub status:		0x0    process information:  	caller process id:	0x0  	caller process name:	-    network information:  	workstation name:	-  	source network address:	-  	source port:		-    detailed authentication information:  	logon process:		kerberos  	authentication package:	kerberos  	transited services:	-  	package name (ntlm only):	-  	key length:		0    event generated when logon request fails. generated on computer access attempted.    subject fields indicate account on local system requested logon. commonly service such server service, or local process such winlogon.exe or services.exe.    logon type field indicates kind of logon requested. common types 2 (interactive) , 3 (network).    process information fields indicate account , process on system requested logon.    network information fields indicate remote logon request originated. workstation name not available , may left blank in cases.    authentication information fields provide detailed information specific logon request.  	- transited services indicate intermediate services have participated in logon request.  	- package name indicates sub-protocol used among ntlm protocols.  	- key length indicates length of generated session key. 0 if no session key requested.

hi,
appreciate posting in directory services forum. since question more regarding adfs, suggest post questions in adfs forum:
https://social.technet.microsoft.com/forums/windowsserver/en-us/home?forum=adfs
reason why recommend posting appropriately qualified pool of respondents, , other partners read forums regularly can either share knowledge or learn interaction.
best regards,
wendy

---

please remember mark replies answers if help.
if have feedback technet subscriber support, contact tnmff@microsoft.com. 

Windows Server  >  Directory Services