SAM System Event Error

[Michael Shingledecker]

Ever since I have changed the administrators password in
my W2K domain on one DC, which happens to be the PDC
emulator, I am getting a System Event Error as follows:
Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12294
Date: 11/14/2003
Time: 9:57:23 AM
User:
Computer:
Description:
The SAM database was unable to lockout the account of ຩ
due to a resource error, such as a hard disk write failure
(the specific error code is in the error data) . Accounts
are locked after a certain number of bad passwords are
provided so please consider resetting the password of the
account mentioned above.
Data:
0000: c00002a5

None of the other DC's in the domain have this error
message.
There have been no Event Error mesages in Directory
Service.
Any Ideas?

 

[Alan Sterling [MSFT]]

Hi Michael:
Look into
306091 Description of NTDS Replication Warning IDs 1083 and 1061, and SAM
Error
http://support.microsoft.com/?id=306091

You may also have RANDEX.Q worm.

Thanks

Alan Sterling---MCSE
Windows 2000 Directory Services

 

[Michael Shingledecker]

Hey Alan,
I have no NTDS replication warnings of ID 1083, 1061, 1173
or 1413.
I have no info on randex.q worm nor cna I found any out
from Network Associates.
Any other ideas.

 

[Guest]

Michael

Search on Mcafee site for netfd32.exe and or Randex.