Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Domain Controler error Windows 2003 Server Event ID: 531 - Account Disabled

Posted on 2008-11-03
2
Medium Priority
?
1,398 Views
Last Modified: 2012-06-27
Each night around the same time we see this event on one of our Domain Controllers:
Log=Security
Time=11/1/2008 2:07:09 AM
ID=531
Type=Failure Audit
Cat=Logon/Logoff
Src=Security
Comp=GENESIS
Acct=SYSTEM
Msg=Logon Failure:

        Reason:         Account currently disabled
        User Name:
        Domain:
        Logon Type:     3
        Logon Process:  Authz
        Authentication Package: Kerberos
        Workstation Name:     GENESIS
        Caller User Name:       GENESIS$
        Caller Domain:  NIAID
        Caller Logon ID:        (0x0,0x3E7)
        Caller Process ID:      1044
        Transited Services:     -
        Source Network Address: -
        Source Port:    -

Genesis is the name of our Domain Controller.  I saw some other postings about this saying that it had to do with the "Licensing Server".  Can someone shed some light for me on what a "Licensing Server" is.  I did check the Licensing server settings in Site and Services and it says "Invalid".  Any help would be appreciated.

Thanks!

0
Comment
Question by:esbfern
2 Comments
 
LVL 6

Expert Comment

by:meugen
ID: 23040295
Try to disable Licensing Server service and then check the Eventviewer again.
0
 

Accepted Solution

by:
esbfern earned 0 total points
ID: 24328163
Was unable to figure out what the true cause.  There is no harm in these errors, they jsut generate noise.  Closing post.  
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question