Event ID 12294
We are getting following event error in dc and adc in every minutes.Please suggest any solution
The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please
consider resetting the password of the account mentioned above.
user: domain administrator
computer: domain controller
March 10th, 2011 1:57am
As it is mentioned in this Microsoft article, this problem may be due to a virus. Please run a full scan on your disks to delete all viruses.
Also, have a look to this
Microsoft article.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 3:50am
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will
be happy to help.
Regards,
Arthur Li
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
March 13th, 2011 10:32pm
i did not do scanning in safe mode. Because it is our dc.Any other option?
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2011 2:36am
There is no other way out as the safe mode is the best option to scan the system becasue viruses are usually attached to the dll's and system services and antivirus scanner cannot delete those files as those files are already attached
to the process Hence they are detactched only in the safe mode.http://www.virmansec.com/blogs/skhairuddin
March 14th, 2011 2:54am