Hi all, I'm attempting to run a system state backup using ntbackup but am receiving the following error: Event ID: 8012 The 'Active Directory' returned 'Unable to update the password. The value provided as the current password is incorrect. ' from a call to 'BackupPrepare()' additional data '\\MY-SERVER' This occurs for both interactive or scheduled backups, for a number of users all of which are domain admins with passwords that have not changed for a long period. I can't find much info relating to this one. Thanks.

Hi, Please have a look at following group policy: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Do not allow storage of credentials or .NET Passports for network authentication Change the group policy, run a gpupdate /force and redo the NTbackup steps for a test. Meanwhile, if needed, scan for virus on the system. MIRC Trojan-related attack detection and repair http://support.microsoft.com/kb/328691

thanks for the tip, unfortunately after changing this value to both enabled or disable it did not resolve my ntbackup issue (gpoupdate and restart following each change). Full AV scan of DC did nothing and it is currently fully updated. We have 5 DC's on this domain and all report same error at same point in system state backup. We have a parent domain for the one I'm having an issue with and it's system states work fine.

Try to remove all cached password stored go to start/run and type control keymgr.dll (Or Control Panel -> Store User Names and Passwords) and remove any cached passwords. If issue still exists, check if following value of the registry key: KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\DisableDomainCreds [REG_DWORD] is set to 0x1

There are no entries under Stored usernames and passwords. Changed registry setting from 0x0 to 0x1 and restarted but when run backup stops at same point each time with same error.