A. Windows will generate event ID 529 if the machine environment meets the following criteria:

  • The machine is running Windows XP
  • The machine is a member of a domain
  • The machine is using a machine local account
  • You've enabled logon failure auditing

When the user logs off, Windows will write event ID 529 to the log file because the OS incorrectly tries to contact the domain controller (DC), despite the fact that the machine is using a local account. Microsoft currently doesn't provide a fix for this problem, but you can safely ignore this event ID.