Event ID 1083

[steve]

hello all,

Situation: one domain forest, one site, 2 DCs (both W2K),
2000 mixed mode domain

One DC has no problems, the second has the above
replication problem on occasion. Today it has happened
more often than normal. I ran dcdiag several times and
got a failed kccevent test. After a while it corrects
itself but it has failed twice today that I can document.

I ran the repadmin /sync successfully per the knowledge
base article 296714 but later had another 1083 event with
another failed kccevent which again corrected after a
short while.

Should I be concerned about this? If yes, what is my
next step?

Thanks,

Steve

 

[Tom Ausburne]

Hi Steve,

You said that you ran the repadmin /sync per this article:

296714 Event ID 1083 Is Logged During Active Directory Replication
http://support.microsoft.com/?id=296714

Did you follow the steps to see if you did indeed have a duplicate
object?

In checking our database I found that this can also occur if several
users are changing their passwords or if a particular user is
entering a bad password and the BadPasswordCount for that user is
increasing. This could be caused by a failed hacking attempt on an
account. It was also noted that the antivirus service was logging
the bad password
attempts.

I hope that helps.


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.