Error 12294
Contents |
(עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered by: event id 12294 vss Error ID 12294 Directory-Services-SAM Windows Server > Directory Services Question 0 Sign event id 12294 sam domain controller in to vote Hi, we have 2 windows 2008 R2 doamin controllers. I changed password for built-indomain event id 12294 administrator account Administrator two days ago and now I am getting errors on both controllers. Error ID 12294 Directory-Services-SAM The SAM database was unable to lockout the account of Administrator due
A50200c0
to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above. How could I solve this? Wednesday, September 12, 2012 1:07 PM Reply | sammsg_lockout_not_updated Quote Answers 0 Sign in to vote Hi, Error ID 12294 means there are numerous failure authentication events in security log due to incorrect credentials or could be a virus issue. As you have changed the built-indomain Administrator password then ensure that the credentials are updated everywhere. e.g. for service account, IIS application pool, account tied to a scheduled task, virtual machine, mapped drice, etc... If you have already verified the the old Administrator credentials areupdatetd everywhere then the reason for event 12294 is worm virus and you need to full virus scan and Malicious Software Removal tool Virus to remove the Win32/Conficker malware family. Event ID: 12294 Woes http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx Malicious Software Removal tool Virus to remove the Win32/Conficker malware family. http://support.microsoft.com/kb/962007Best regards, Abhijit Waikar. MCSA | MCSA:Messaging | MCITP:SA | MCC:2012 Blog: http://abhijitw.wordpress.com Disclaimer: This posting is provided "AS IS" with no warranties or guarantees and confers no rights. Proposed as answer by Meinolf WeberMVP Thursday, September 13, 2012 7:05 AM Marked as answer by Yan Li_Moderator Thursday, September
13, 20124 0 0 0 I came across this great error today at a customer site: Event Type: ErrorEvent Source: SAMEvent Category: NoneEvent event id 12294 the sam database was unable to lockout ID: 12294Date: 3/3/2003Time: 9:42:55 AMUser: (USERNAME)Computer: (COMPUTERNAME)Description:The SAM database was
C00002a5
unable to lockout the account of ? due to a resource error, such as a hard
Microsoft-windows-directory-services-sam
disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so https://social.technet.microsoft.com/Forums/windowsserver/en-US/4a707db0-f8d9-47f2-b89b-4f9848d36e55/error-id-12294-directoryservicessam?forum=winserverDS please consider resetting the password of the account mentioned above. After some research, I found that the SAM 12294 events appear, if the domain controller receive numerous failure authentication requests for the account in the same time (the common reason is worm virus or third-party software). Since the domain controller is busy https://blogs.technet.microsoft.com/mempson/2012/01/13/event-id-12294-woes/ to update the account lockout threshold, doesn't have enough disk resource to set the account as locked out, then generate the SAM 12294 events. When the domain controller has the enough resource, the account will be locked out if we configured Account Lockout policy. As it turned out in this instance, it was just an application with the wrong credentials. Tags Active Directory Windows 2003 Comments (4) Cancel reply Name * Email * Website hamid says: February 10, 2013 at 1:14 pm WHER IS THE PROGRAM Reply morad says: February 10, 2013 at 1:27 pm thanks for this program Reply Faridtech says: March 9, 2013 at 6:57 pm merci Reply huh says: October 7, 2015 at 8:55 pm what is this? Reply Follow UsPopular TagsWindows 2008 Active Directory Tips and Tricks Group Policy Pages News Windows 2003 Migrations Archives May 2014(1) November 2013(1) May 2013(1) April 2013(1) January 2013(2) December 2012(3) October 2012(1) July 2012(1)
Monitor an unlimited number of servers with $49/year With the current low prices for servers and the need for processing power, even a small company may end up with quite a few of them. If ten years ago it was http://www.eventid.net/display-eventid-12294-source-SAM-eventno-875-phase-1.htm still common to see an entire company using just one server, these days that's no longer the case. New computers are added to the network with the understanding that they will be taken care of by the admins. Keeping an eye on these servers is a tedious, time-consuming process. Even with 5 minutes per server (to check the logs and other parameters), it may take an hour to make sure that everything is ok event id and no "red lights" are blinking on any of the servers. read more... Event ID: 12294 Source: SAM Source: SAM Type: Error Description:The SAM database was unable to lockout the account of due to a resource error, such as a hard disk write failure (the specific error code is in the error data). Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the event id 12294 account mentioned above. Data: 0000: