Exchange 2016 Directory-Services-SAM Event ID 16969
Hello,
I have recently deployed a new Exchange 2016 server in our current SBS 2011 (Server 2008 R2) environment. The SBS 2011 server is the current domain controller. I have noticed that ever since moving the Arbitration system mailboxes from the old Exchange 2010 server to the new Exchange 2016 server I am now receiving a Directory-Services-SAM Event ID 16969 error every 15 minutes which states:
"XXX remote calls to the SAM database have been denied in the past 900 seconds throttling window."
I am not sure if moving the mailboxes is what caused it, but I was not receiving this error before. After checking the domain controller I did not see any policy that specifically defines this security policy so I am not entirely sure what is causing this to fail since in the local security policy on the Exchange 2016 server has the local Administrators defined to allow access. Any idea as to what would be causing this?
Thank you
I have recently deployed a new Exchange 2016 server in our current SBS 2011 (Server 2008 R2) environment. The SBS 2011 server is the current domain controller. I have noticed that ever since moving the Arbitration system mailboxes from the old Exchange 2010 server to the new Exchange 2016 server I am now receiving a Directory-Services-SAM Event ID 16969 error every 15 minutes which states:
"XXX remote calls to the SAM database have been denied in the past 900 seconds throttling window."
I am not sure if moving the mailboxes is what caused it, but I was not receiving this error before. After checking the domain controller I did not see any policy that specifically defines this security policy so I am not entirely sure what is causing this to fail since in the local security policy on the Exchange 2016 server has the local Administrators defined to allow access. Any idea as to what would be causing this?
Thank you
ASKER
Thank you, Saif. What's odd is that I have already looked at that and the local Administrators group on the Exchange 2016 server was already listed to allow access and that group has all admin accounts I could think of that would need access including the Exchange server itself. I am not sure which account is requesting access to the SAMS database so I am not sure which account to add. I even tried adding the admin account I used to set up Exchange and that didn't work either. My guess is that it's some other system account requesting access but I am not sure how to find out which one.
Please check the below earlier discussions may point you to fix this issue:
https://www.experts-exchange.com/questions/29002909/Event-16969-logged-with-remote-calls-to-the-SAM-database-have-been-denied-in-the-past-900-seconds-throttling-windows.html
https://social.technet.microsoft.com/Forums/en-US/94a5b922-889a-42a6-840d-8bb8df6c0a8e/event-16969-directoryservices-sam?forum=win10itprosecurity
https://www.experts-exchange.com/questions/29002909/Event-16969-logged-with-remote-calls-to-the-SAM-database-have-been-denied-in-the-past-900-seconds-throttling-windows.html
https://social.technet.microsoft.com/Forums/en-US/94a5b922-889a-42a6-840d-8bb8df6c0a8e/event-16969-directoryservices-sam?forum=win10itprosecurity
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://support.oneidentity.com/kb/239045/check-password-for-windows-accounts-fails-with-error-0x80070005-access-is-denied-0-the-store-password-for-system-name-does-not-match-the-managed-system-