Event ID 12294 details in System - SAM - Event Repository • MonitorWare Knowledge Base

KnowledgeBase Event Repository

This site is the central interface to the Adiscon Event Repository

Details for this entry

Eventlog Type:

System

Eventlog Source:

SAM

Event ID:

12294

Full Description:

The SAM database was unable to lockout the account of %1 due to a resourceerror, such as a hard disk write failure (the specific error code is in theerror data) . Accounts are locked after a certain number of bad passwords areprovided so pleas
This Event occurs after changing the domain admin account. You are not able to access with new domain admin-authorizations if you don't restart the "NT LM Security Support Provider" Service and, after that, the Machine.

This can also occur if your System is infected with the W32.Randex.F Worm.

There's also an Microsoft Knowledge Base Article available for this Problem:

Q306091

Microsoft says: "You must analyze the error data to receive the correct error condition. DWord data hexadecimal 0xc00002a5 = decimal -1073741147: STATUS_DS_BUSY, ntstatus.h)."

More Informations:

CAUSE
This issue may occur when a computer on your network is infected with the W32.Randex.F worm or with a variant of it.
RESOLUTION
To resolve this issue, run a complete virus scan on your network using the latest available virus definitions. Use the scan to remove the W32.Randex.F worm. For information about how to perform a virus scan or how to obtain the latest virus definitions, see your antivirus software documentation, or contact the manufacturer.

Search for this Event::

Search in Knowledge Base • Search in this Forum • Search on Windows-Expert.com

Software Vendor: Microsoft

Accessed: 26377

Discuss the Event

Post a reply

Discussion for KB Entry 5443 - Event ID 12294

by knowledgebase on Thu May 29, 2008 4:41 pm

This is the discussion thread for the Knowledge Base Entry 5443

Eventlog Type: System
Eventlog Source: SAM
Event ID: 12294
Link to KB Entry

Short Description:

The SAM database was unable to lockout the account of %1 due to a resourceerror, such as a hard disk write failure (the specific error code is in theerror data) . Accounts are locked after a certain number of bad passwords areprovided so pleas

knowledgebase: Frequent Poster; Posts: 128; Joined: Wed May 28, 2008 10:09 am

Post a reply

About the KnowledgeBase Event Repository

This is a repository of known Windows Events, hopefully together with a description of what it means, when it appears and how to troubleshoot it. The event repository was initially provided as a tool for parser creation but has since evolved. It is now part of the overall knowledgebase in the hope that it provides a useful service to the community. Please add your comments and questions (which we try to answer), as this increases the event repository usefulness for all of us.