|
Posted by Roger Abell [MVP] on October 20, 2006, 11:56 am
If you were Registered and logged in, you could reply and use other advanced thread options
Try using as a search sting in regedit
916E6871-4AE0-4C0E-8445-7B1E4C030D32
to see if you can find the app id name of what is
involved. Also, look for scheduled tasks (or services)
on that machine set to run as that account.
> I'm experiencing a problem with one of my Domain accounts. The user
> recently
> changed their Domain password, but this account is not getting locked out
> on
> a regular basis. After come investigations I found these Security and
> System
> errors on one of my server, but am unable to find the source of the
> problem
>
> System Error:
> Event Type: Error
> Event Source: DCOM
> Event Category: None
> Event ID: 10004
> Date: 20/10/2006
> Time: 09:04:00
> User: N/A
> Computer: UK-DATA
> Description:
> DCOM got error "The referenced account is currently locked out and may not
> be logged on to. " and was unable to logon s1ad\sakeju in order to run the
> server:
>
>
> Security Error:
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 529
> Date: 20/10/2006
> Time: 09:12:19
> User: NT AUTHORITY\SYSTEM
> Computer: UK-DATA
> Description:
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: sakeju
> Domain: s1ad
> Logon Type: 4
> Logon Process: DCOMSCM
> Authentication Package: Negotiate
> Workstation Name: UK-DATA
>
> Please let me know if you have any ideas as to what could be cauing this?
>
> Thank you in anticipation.
>
> Reuben
| 
XML site map