Errors After Changing Administrator Password

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

We had to change our domain administrator password, and it (obviously)
caused a few things to break. I have been able to resolve most of them, but
was looking for some verification on this problem in particular.

I noticed the following in the event logs this morning, each logged about
once per second:

System Log:
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10004
Date: 1/12/2006
Time: 2:00:36 AM
User: N/A
Computer: BRADFORDDC01
Description:
DCOM got error "Logon failure: unknown user name or bad password. " and was
unable to logon BRADFORDREALES\ADMINISTRATOR in order to run the server:
{B2B30542-D976-11D3-B188-0040056AC398}

Security Log:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 1/12/2006
Time: 2:00:29 AM
User: NT AUTHORITY\SYSTEM
Computer: BRADFORDDC01
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: ADMINISTRATOR
Domain: BRADFORDREALES
Logon Type: 4
Logon Process: DCOMSCM
Authentication Package: Negotiate
Workstation Name: BRADFORDDC01
Caller User Name: BRADFORDDC01$
Caller Domain: BRADFORDREALES
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 828
Transited Services: -
Source Network Address: -
Source Port: -


Using eventid.net, I believe that I was able to find the offending account
information by doing the following:
Opening Administrative Tools...Component Services...Computers...My
Computer...DCOM Config.

At this point, I was prompted with a few alert boxes: DCOM Configuration
Warning! The CLSID {...} item, ... and title PccFrameWindow Class has the
named value AppID, but is not recorded under \\HKEY_CLASSES_ROOT\AppId. Do
you wish to record it? I chose no for this and another popup for a
different application (I believe these are related to the accounting
software).

Once in DCOM Config, I looked for the application ID referenced in the
email, and found it for the application "BDmTk." Sure enough, when I went
into the Properties...Identity tab, it was set to run as the Administrator,
with a place to enter the password.

So my question is, is it safe to update this password? My gut says that it
is, but I'm not familiar with DCOM Config at all, so I am looking for some
validation before I plow forward.

Thanks,

Rob


.

Relevant Pages

  • Re: Security issue
    ... How to configure remote access client account lockout in Windows Server 2003 ... 10 time a username and password (Mostly if it's administrator) then the ... Logon Failure: ... Caller User Name: PRANA$ ...
    (microsoft.public.windows.server.sbs)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... I'm trying to figure out what other permissions the Administrator has that are not obvious. ... They appear to run and don't issue any errors in the scheduled tasks log, yet they seem to be having permissions problems. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.security)
  • Re: Help needed with Critical Errors in Security Log
    ... Logon Failure: Account locked out ... How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com ... Caller User Name: administrator ... Caller Domain: BARSANADHAM ...
    (microsoft.public.windows.server.sbs)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... figure out what other permissions the Administrator has that are not ... got several scheduled tasks that are exhibiting some strange behavior. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.security)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... Event Type: Information ... Event Source: USER32 ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)