urgent help required

[KK]

Hi,
i have been getting this error message from several days on one of my domain
controllers,as far as i know.. we have not changed the administrator
password.
IN system Event

Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12294
Date: 11/26/2003
Time: 8:13:39 AM
User: FICWORKGROUP\Administrator
Computer: WADDC02
Description:
The SAM database was unable to lockout the account of ? due to a resource
error, such as a hard disk write failure (the specific error code is in the
error data) . Accounts are locked after a certain number of bad passwords
are provided so please consider resetting the password of the account
mentioned above.
Data:
0000: c00002a5

and in Directory Services log

Event Type: Warning
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1083
Date: 11/26/2003
Time: 9:51:31 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: WADDC02
Description:
Replication warning: The directory is busy. It couldn't update object
CN=Administrator,CN=Users,DC=corp,DC=register,DC=com with changes made by
directory cc5f0d3c-b34e-4d55-a516-88a3c817c227._msdcs.corp.register.com.
Will try again later.


I checked with repadmin utility,it is showing no issues.
I checked with lockoutstatus utility, which is also showing no issue with
admin account.
ADUC is also showing the account to be not locked out.

What should I check ?
Thanks
GK

 

[Daniel Chang [MSFT]]

Here's the first step:

306091 Description of NTDS Replication Warning IDs 1083 and 1061, and SAM
Error
http://support.microsoft.com/?id=306091

SUMMARY

=======



Simultaneous changes against Active Directory object attributes on different
domain controllers may cause an Active Directory collision for the update.
When this occurs, NTDS replication warnings 1083 or 1061, or SAM error ID
12294 may be logged.

It looks like your situation is referenced in this KB.

HTH,

Daniel


--
--
Daniel Chang
Server Setup Team

Search our Knowledge Base at http://support.microsoft.com/directory
Visit the Windows 2000 Homepage at
http://www.microsoft.com/windows2000/default.asp
See the Windows NT Homepage at http://www.microsoft.com/ntserver/

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!
This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose.
The views and opinions expressed in this newsgroup posting are mine and do
not necessarily express or reflect the views and / or opinions of Microsoft.


: Hi,
: i have been getting this error message from several days on one of my
domain
: controllers,as far as i know.. we have not changed the administrator
: password.
: IN system Event
:
: Event Type: Error
: Event Source: SAM
: Event Category: None
: Event ID: 12294
: Date: 11/26/2003
: Time: 8:13:39 AM
: User: FICWORKGROUP\Administrator
: Computer: WADDC02
: Description:
: The SAM database was unable to lockout the account of ? due to a resource
: error, such as a hard disk write failure (the specific error code is in
the
: error data) . Accounts are locked after a certain number of bad passwords
: are provided so please consider resetting the password of the account
: mentioned above.
: Data:
: 0000: c00002a5
:
: and in Directory Services log
:
: Event Type: Warning
: Event Source: NTDS Replication
: Event Category: Replication
: Event ID: 1083
: Date: 11/26/2003
: Time: 9:51:31 AM
: User: NT AUTHORITY\ANONYMOUS LOGON
: Computer: WADDC02
: Description:
: Replication warning: The directory is busy. It couldn't update object
: CN=Administrator,CN=Users,DC=corp,DC=register,DC=com with changes made by
: directory cc5f0d3c-b34e-4d55-a516-88a3c817c227._msdcs.corp.register.com.
: Will try again later.
:
:
: I checked with repadmin utility,it is showing no issues.
: I checked with lockoutstatus utility, which is also showing no issue with
: admin account.
: ADUC is also showing the account to be not locked out.
:
: What should I check ?
: Thanks
: GK
:
:

 

[KK]

HI Daniel ,
thanks for the input.I have already been to the link you mentioned,but it
confused me..as some description is intertwined.

1.After error event 12294 I have never got event 1413 ( which signifies that
the queued update has been done)
2.How to get the replication completed without the collision ?
I have only two domain controllers..when i start the replication manually
it gives no
error in the GUI phase.

3.Shall I ignore the errors altogether ?
4.Some days back .i started getting some errors in my backexec program (
veritas) that it could not back up a domain controller as it could not find
free time due to access activity on the disk..for that i reduced the free
seek time from 5 sec to 3 sec..no change then i uninstalled the backexec
client altogether.
I was wondering whether the error STATUS_DS_BUSY or 12294 has to be
something with too fast replication between the 2 domain controllers.

Thanks a lot
GK