Active Directory
--
Questions
--
Followers
Top Experts
SAM Error 12294 on DC
Just started receiving SAM error 12294 on 2003 AD primary domain controller as well as NTDS replication warning 1083 followed by 1955. The Domain Administrator account is constantly being locked out? Can anyone assist with this problem. I have disabled the administrator account in both the Default Domain secuirty policy and Default Domain Controller security policy and that has stopped the errors but need to know if we are being hacked or what could be the root cause?
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
ASKER CERTIFIED SOLUTION
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
The SAM database was unable to lockout the account of administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.
Words: 0000: c00002a5
Bytes:0000: a5 02 00 c0
Words: 0000: c00002a5
Bytes:0000: a5 02 00 c0
Did I run this right?
C:\Martin\err.exe\Err>err c00002a5
# for hex 0xc00002a5 / decimal -1073741147 :
STATUS_DS_BUSY
# The directory service is busy.
# 1 matches found for "c00002a5"
C:\Martin\err.exe\Err>err c00002a5
# for hex 0xc00002a5 / decimal -1073741147 :
STATUS_DS_BUSY
# The directory service is busy.
# 1 matches found for "c00002a5"
Issue was resolved. A utility PC that was not joined to the Domain had a service running using the local Administrator account. Once a new local account was created and the service set to use that account the Domain Administrator account is no longer being locked out and the SAM errors no longer appear.
EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Was told to use a tool with no instructions or further replies.
We are having the same issue and we tried the above steps but dint get success. Could you please help us for the same.
Active Directory
--
Questions
--
Followers
Top Experts
Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.