Re: Event ID 623



Another place to check would be the number of security and distribution
groups this user belongs to.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
news:%23d$rFTImHHA.1776@xxxxxxxxxxxxxxxxxxxxxxx
I would check out the object:
CN=cstjohn444,OU=2000,OU=Students,OU=1016485,OU=Primary,DC=XXXXX,DC=XXXXX,DC=net

See if there are large numbers of certificates or proxy addresses
associated with this user. If there are clean it up and see if this
helps.

I haven't see this before but from reading others with similar issues it
sounds like this could be the issue.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"MCSE_J" <MCSE_J@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:98437A65-657E-4510-9EBE-623E2F40F6BC@xxxxxxxxxxxxxxxx
Folks - any help would be greatly thanked

I have one server on the domian (out of more than 1000) that is
experienceing the following events

Event Type: Error
Event Source: NTDS ISAM
Event Category: (14)
Event ID: 623
Date: 16/05/2007
Time: 17:26:12
User: N/A
Computer: XXXXXXX-DC02
Description:
NTDS (552) NTDSA: The version store for this instance (0) has reached its
maximum size of 103Mb. It is likely that a long-running transaction is
preventing cleanup of the version store and causing it to build up in
size.
Updates will be rejected until the long-running transaction has been
completely committed or rolled back.
Possible long-running transaction:
SessionId: 0x038508C0
Session-context: 0x00000000
Session-context ThreadId: 0x00000274
Cleanup: 1

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: NTDS SDPROP
Event Category: Internal Processing
Event ID: 2008
Date: 16/05/2007
Time: 17:26:12
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: XXXXXXX-DC02
Description:
Internal error: The security descriptor propagation task encountered an
error while processing the following object. The propagation of security
descriptors may not be possible until the problem is corrected.

Object:
CN=cstjohn444,OU=2000,OU=Students,OU=1016485,OU=Primary,DC=XXXXX,DC=XXXXX,DC=net

Additional Data
Error value:
-1069 JET_errVersionStoreOutOfMemory, Version store out of memory
(cleanup
already attempted)
Internal ID:
2080495

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1479
Date: 16/05/2007
Time: 17:26:12
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: XXXXXXX-DC02
Description:
Active Directory could not update the following object on the local
domain
controller with changes received from the following source domain
controller.
Active Directory does not have enough database version store to apply the
changes.

Object:
DC=..SerialNo-XXXXX-DC01.XXXXXL.XXXXX.net\0ADEL:6946709d-8c5b-4e47-8c87-98fd3efbdac7,DC=intranet,CN=MicrosoftDNS,CN=System,DC=XXXXXX,DC=XXXXI,DC=net
Object GUID:
6946709d-8c5b-4e47-8c87-98fd3efbdac7
Source domain controller:
d98c11a8-a297-437d-a2af-7b7decbfafc1._msdcs.XXXXX.net

User Action
Restart this domain controller. If this does not solve the problem,
increase
the size of the database version store. If you are populating the objects
with a large number of values, or the size of the values is especially
large,
decrease the size of future changes.

Additional Data
Error value:
8573 The database is out of version store.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: NTDS SDPROP
Event Category: Internal Processing
Event ID: 2008
Date: 16/05/2007
Time: 17:26:12
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: XXXXXXX-DC02
Description:
Internal error: The security descriptor propagation task encountered an
error while processing the following object. The propagation of security
descriptors may not be possible until the problem is corrected.

Object:
CN=dedwards484,OU=2000,OU=Students,OU=XXXXXXX,OU=Primary,DC=XXXXXL,DC=XXXXX,DC=net

Additional Data
Error value:
-1069 JET_errVersionStoreOutOfMemory, Version store out of memory
(cleanup
already attempted)
Internal ID:
205066f

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The server is Windows 2003 - the domain and forest functionality is
2003 -
The server does not run Exchange

Any Ideas anyone?

Regards




.



Relevant Pages

  • Re: Wal Mart Kills Suspected Shoplifter in Parking Lot
    ... >> These were not security guards. ... >> Stores policies encouraged them to take those actions, Wal Mart itself ... >> corporation's policies if the individual store sees fit. ...
    (alt.gathering.rainbow)
  • Re: TV Licensing are conning the BBC
    ... You could have forgiven the security man for believing ... >the store had given him powers to stop and check people. ... "On suspicion of theft" he replied. ... The police came at 9:45pm, 45 minuted after the store had closed ...
    (uk.legal)
  • Re: Pentester convicted..
    ... Starting at your "The door opens." ... Inform the store's customers that he was able to enter the store, ... NOT tell the store owners that he entered the store, ... A security pro notices a flaw, checks to make sure he is not on crack by ...
    (Pen-Test)
  • Re: Grant Administrative Access to a Domain Controller
    ... MPerrault suggested security, you said "IT CAN BE DONE WITHOUT ANY FANCY ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exmerge problem!!!
    ... Create a new security group called "Exmerge" in Active Directory ... In the Exchange System Manager, locate the MAILBOX STORE you wish to ... > Information Store, no nothing.It just denies me access to the Mailbox ... > the 'Log file not initialized' log file for more information. ...
    (microsoft.public.exchange.admin)