Need to resolve Event 4136

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi -

We have been having a problem with a domain account getting locked out. In the security log, I have found entries such as:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/6/2009
Time: 5:59:27 PM
User: NT AUTHORITY\SYSTEM
Computer: <systemname>
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: <username>
Domain: <domain name>
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: <systemname>
Caller User Name: <systemname>$
Caller Domain: NA
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1580
Transited Services: -
Source Network Address: -
Source Port: -

(where the Caller Process ID with either be that of cisvc.exe or cidaemon.exe)

Eventually the account gets locked out and affects the entire application.

In the application event log I will see events such as this:

Event Type: Error
Event Source: Ci
Event Category: CI Service
Event ID: 4136
Date: 10/6/2009
Time: 6:04:52 PM
User: N/A
Computer: <systemname>
Description:
<CiDaemon | Indexing Service> failed to logon <domain name>\<username> because of error 1326.

From the MS Help & Support Center, I found the following:
------------------------------------------
Details
Product: Windows Operating System
ID: 4136
Source: Ci
Version: 5.0
Component: Application Event Log
Symbolic Name: MSG_CI_REMOTE_LOGON_FAILURE
Message: %1 failed to logon %2 because of error %3.

Explanation
This event record usually means you have entered the wrong password for a universal naming convention catalog.

User Action
Try reentering the correct password.
------------------------------------------

So, this tells me that an incorrect password was entered for a UNC for a seach catalog directory path. However, when I open the MMC for ciadv.msc, I can see where to enter a user and password when creating a new directory, but I can't find any way of finding the username of the existing directories in order to update the password.

Is there some way I can determine the username of the existing directories?

Thanks!

Mike

.

Relevant Pages