Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 230
  • Last Modified:

Change of Enterprose Administrator Account Password

Hi Guys,
Ever since we changed the enterprise Administrators password we keep getting this error in our event logs of our Domain controllers. We have a program called LogCaster monitoring these logs and we have started to get flooded with this email and we never did before.
The Event Details are as below:

4/12/2007 9:12:48 AM 644 Success Audit Account Management Security DC1 SYSTEM
User Account Locked Out: Target Account Name: Administrator Target Account ID: add\administrator Caller Machine Name: DC2 Caller User Name: DC1$ Caller Domain: add Caller Logon ID: (0x0,0x3E7)

and.....

4/12/2007 9:12:48 AM 644 Success Audit Account Management Security DC2 SYSTEM
 User Account Locked Out: Target Account Name: administrator Target Account ID: add\administrator Caller Machine Name: DC2 Caller User Name: DC2$ Caller Domain: add Caller Logon ID: (0x0,0x3E7)  

Cheers
Chris
0
ISfish
Asked:
ISfish
  • 5
  • 4
1 Solution
 
Jay_Jay70Commented:
i am guessing you have a service running under that administrator logon and you havent updated the password on DC2
0
 
ISfishAuthor Commented:
checked that and no servies are running on the Domain controllers as administrator they are all local system or network services running
0
 
Jay_Jay70Commented:
hmmm no custom appz or sheduled tasks running under that admin account either?
0
Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

 
ISfishAuthor Commented:
not from the domain controllers :(
0
 
Jay_Jay70Commented:
hmm not just DC's but anywhere in the business....Something is running and locking it out
0
 
ISfishAuthor Commented:
The weird this is that the account is not locked out.
0
 
Jay_Jay70Commented:
bloody weird! are they constant errors?
0
 
ISfishAuthor Commented:
yeah they are happening approximatley every 10 - 15 mins, sometimes 25mins. Very very strange
0
 
Jay_Jay70Commented:
lol Windows appears to be giving birth :) dont suppose there is much chance of a restart?
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now