System Event ID: 12302 - Source: SAM - The WDIGEST package failed to update additional credentials for user xxx

On one of our DCs, we are having errors posted to the system log as follows:

     Type: Error
     Event ID: 12302
     Source: SAM
     Category: None
     User: N/A

     Description:
     The WDIGEST package failed to update additional credentials for user xxxxxx.  The error code is in the data of the event log messag e.

     For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

     Data: Bytes
     0000: 8a 02 00 c0               Š..À    

The errors started 10/25/2004, and post almost every day, but do skip a few days.  The number of errors  per day varies from zero to 20 or more.  There do seem to be more errors during the week (higher utilization time) than on the weekends (lower utilization time).

There seems to be no rhyme or reason as to when the errors post.  They do tend to post in groups of 2 to 10, within an hour or so of each other, but this is not a hard/fast rule.

It is worth noting that the DC appears to be running fine outside of this.  Users are authenticating against it, and no ill-effects have been noticed.

The MSKnowledgebase has nothing to say about this Event ID or WDIGEST.  The link in the event sends you to a page that says that there is no information available.  Google wasn't any help either.


Thank you,

Tom Woods
marmarmatAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

CiaranDolanCommented:
Have a look at the digest authentication system in Windows:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/7928d566-193c-46da-aab9-96d4c0b21e91.mspx

Do you have applications on the user's machines that authenticate on a regular basis? It could be that some authentication scheme is sending through digest auth messages which your server doesn't understand. As a result you get the error. Also, one of the digest auth registry entries may have become corrupt.

Finally, ensure the time is in synch between clients and server.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Dmitri FarafontovLinux Systems AdminCommented:
Volume Shadow Copy Service error: An internal inconsistency was detected in trying to contact shadow copy service writers. Please check to see that the Event Service and Volume Shadow Copy Service are operating properly.

Start >> Run >> regsvr32 ole32.dll

Also if you are using Visio, try deleting this Registry Key
Dmitri FarafontovLinux Systems AdminCommented:
HKLM\SYSTEM\CurrentControlset\Control\ContentIndex\Catalogs\visio
Dmitri FarafontovLinux Systems AdminCommented:
Hello, marmarmat

Please finalize your question or ask for more clarfication :-)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.