Re: Administrator Account got locked out frequently

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hello Fahad,

Have a look here:
http://www.eventid.net/display.asp?eventid=1955&eventno=4301&source=NTDS%20Replication&phase=1

http://www.eventid.net/display.asp?eventid=1083&eventno=919&source=NTDS%20Replication&phase=1

Is the password changed from the account and maybe some services running with the account, where the password is not changed?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Dear;

we have 2 DC on our network both od them is W2k3 with SP2. I noticed
the following warning on the Directory service log:

Event Type: Warning
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1083
Date: 1/30/2008
Time: 4:54:05 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: ourDCName
Description:
Active Directory could not update the following object with changes
received
from the domain controller at the following network address because
Active
Directory was busy processing information.
Object:
CN=Administrator,CN=Users,DC=ourdomain
Network address:
3ce169e8-767c-4cff-b7f6-99f785f77fe3._msdcs.ourdomain
This operation will be tried again later.

also this event is logged in the same log:

Event Type: Information
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1955
Date: 1/30/2008
Time: 4:54:05 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: ourDCname
Description:
Active Directory encountered a write conflict when applying replicated
changes to the following object.
Object:
CN=Administrator,CN=Users,DC=ourdomain
Time in seconds:
0
Event log entries preceding this entry will indicate whether or not
the update was accepted.

A write conflict can be caused by simultaneous changes to the same
object or simultaneous changes to other objects that have attributes
referencing this object. This commonly occurs when the object
represents a large group with many members, and the functional level
of the forest is set to Windows 2000. This conflict triggered
additional retries of the update. If the system appears slow, it could
be because replication of these changes is occurring.

User Action Use smaller groups for this operation or raise the
functional level to Windows Server 2003.

the domain administrator account got locked out every day at random
time.

I checked a lot of articles but couldn't solve this issue?

please help me...



.



Relevant Pages

  • Re: Administrator Account got locked out frequently
    ... I checked most of our servers to ... make sure the admin account is not used as a service account but nothing ... Active Directory encountered a write conflict when applying replicated ...
    (microsoft.public.windows.server.active_directory)
  • Re: Does anyone know how to fix this??
    ... > Inside the Active Directory Users and Computers in the folder of SYSTEM I ... Give the site's SMS Service account full control rights to the ... MP encountered an error when connecting to SQL Server. ...
    (microsoft.public.sms.setup)
  • Re: Cross-Domain question (Parent - Child)
    ... computer accounts unless logged in directly to the server? ... different DC so the DC you are looking at doesn't get the audit entries. ... Author of O'Reilly Active Directory Third Edition ... User Account Created: ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain troubles
    ... Workgroup administrative environment and the machine account in Active ... Another possiblity is that the Active Directory DNS cannot resolve the ... For example if you built a network segment and abitrarily choose ...
    (microsoft.public.windows.server.general)
  • Re: NTDS Replication Event ID 1083/1955 and account lockouts
    ... Active Directory could not update the following object with changes received ... from the domain controller at the following network address because Active ... Not sure if the event is ocurring after the account has been locked or the ...
    (microsoft.public.windows.server.active_directory)