Hello,
We've noticed an event that gets logged against almost every one of our VMs every day on about 25 minute intervals. An event description example is " 10/30/2018, 7:29:32 AMGuest operation authentication failed for operation Delete Directory on Virtual machine <VM name>". We think this started after upgrading vROPs from 6.7 to 7.0 as that was the only thing that changed in our environment but can't confirm.
The environment is vCenter 6.5 with ESXi, 6.5.0, 7967591. The VM hardware versions range from 9 to 13. Hyperic is also loaded in vROPs but isn't set up to monitor all VMs.
Has anybody seen this to be caused by vROPs or a plugin installed in vROPs that tries to interact with VMs? Are there additional logs we could look at to see the source of these operation attempts? We would like to find out what is causing these operations and stop them.
Thanks in advance!