Windows 2008 R2 Event Id 12294 User Locked

Dear All

I have suddenly facing problem that our users going to be locked out. event 12294 is generated active directory server.

please find attached error log

pls help

Sunil

January 23rd, 2015 1:59pm

See that: http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx

Mainly check that there is worm virus or third-party software that is causing that.

Free Windows Admin Tool Kit Click here and download it now
January 23rd, 2015 3:44pm

Dear Sir,

Thanks for your quick support but as per the your link there is no any software or trick for stopping this.
pls help.

Sunil

January 26th, 2015 7:28am

Hi,

If the account appears to be under an attack, i think you could consider to disable the account.

Please check the following MS article:

Event ID 12294 Account Lockout

https://technet.microsoft.com/en-us/library/cc733228(WS.10).aspx

Regards.

Free Windows Admin Tool Kit Click here and download it now
January 27th, 2015 12:12pm

Dear Sir,

Thanks for your support. I am having problem with al users. so if i disable then how can they login?

I am attaching my default group account lockout policy and adsiedit configuration reslut which is having different.

please check and advise.

Sunil

January 27th, 2015 6:05pm

Hi,

All the domain user have the issue?

Did you try to reset the password for one of affected user account to check the result?

http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx

Regards.

Free Windows Admin Tool Kit Click here and download it now
February 5th, 2015 5:42am

Hi,

According to the below link, the domain controller is busy to update the account lockout threshold, doesn't have enough disk resource to set the account as locked out, then generate the SAM 12294 events.

http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx

Does your DC has enough free disk space? Can you check the disk performance from performance monitoring tool?

Thanks,

Umesh.S.K


  • Edited by Umesh S K Thursday, February 05, 2015 2:58 AM
  • Proposed as answer by Umesh S K Friday, February 06, 2015 6:57 AM
February 5th, 2015 5:58am

500 gb free
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2015 10:28am

Can you run gpdate /force on your domain controller?

Thanks,

Umesh.S.K

February 8th, 2015 7:12am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics