Administrator account renamed; now getting event ID 680, 529, 672

I recently renamed my Administrator account.  In my Security log of my domain controller, I'm getting event IDs 672, 680, 529.  The source of the login is the domain controller itself, so there is something which is still using "Administrator" and not the new account name.

All services which had been using the Administrator account have been updated.  How do identify what is causing this, and how do I change it?  
guardian8xxxAsked:
Who is Participating?
 
guardian8xxxConnect With a Mentor Author Commented:
This issue has been resolved.  As it turns out it was the DHCP server configuration.  I had set up my DHCP server to perform dynamic DNS updates.  This, of course, requires a username and a password.  Once I updated this information, the errors went away.

The event log showed the problem originating from the server itself, but it didn't specifically say what service was causing it.

Thanks to all who replied!
0
 
NotVeryFatCommented:
Are you talking local or domain administrator account?

Have you checked scheduled tasks?

If you go into Task Manager, and tick 'Show processes from all users' is there anything there trying to use the administrtor account?
0
 
kpltechgroupCommented:
event viewer. what program is actually tripping these ID's
0
 
kpltechgroupCommented:
Anytime. I was going to suggest that next windows updates and autoupdaters like java. Bah should post all idea's at once! :)
0
 
guardian8xxxAuthor Commented:
To fix:

1.)  Open DHCP Administrator
2.)  Right-click your DHCP server, select Properties
3.)  Click the Advanced tab, click Credentials
4.)  Update username and password as necessary and click OK, click OK again.
5.)  Restart DHCP service
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.