Dear All
I have suddenly facing problem that our users going to be locked out. event 12294 is generated active directory server.
please find attached error log
pls help
Sunil
Technology Tips and News
Dear All
I have suddenly facing problem that our users going to be locked out. event 12294 is generated active directory server.
please find attached error log
pls help
Sunil
See that: http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx
Mainly check that there is worm virus or third-party software that is causing that.
Dear Sir,
Thanks for your quick support but as per the your link there is no any software or trick for stopping this.
pls help.
Sunil
Hi,
If the account appears to be under an attack, i think you could consider to disable the account.
Please check the following MS article:
Event ID 12294 Account Lockout
https://technet.microsoft.com/en-us/library/cc733228(WS.10).aspx
Regards.
Dear Sir,
Thanks for your support. I am having problem with al users. so if i disable then how can they login?
I am attaching my default group account lockout policy and adsiedit configuration reslut which is having different.
please check and advise.
Sunil
Hi,
All the domain user have the issue?
Did you try to reset the password for one of affected user account to check the result?
http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx
Regards.
Hi,
According to the below link, the domain controller is busy to update the account lockout threshold, doesn't have enough disk resource to set the account as locked out, then generate the SAM 12294 events.
http://blogs.technet.com/b/mempson/archive/2012/01/13/event-id-12294-woes.aspx
Does your DC has enough free disk space? Can you check the disk performance from performance monitoring tool?
Thanks,
Umesh.S.K
Can you run gpdate /force on your domain controller?
Thanks,
Umesh.S.K