The description for Event ID ( 1789 ) in Source ( KIXTART ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: LookupAccountSid failed Error : The trust relationship between this workstation and the primary domain failed. (0x6fd/1789).

It seems to happen when people log in, only found on Windows XP machines as Win9x has no event viewer.

Cheers for your help.