Answered by:
Event ID 12294

Question
-
We are getting following event error in dc and adc in every minutes.Please suggest any solution
The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.
user: domain administrator
computer: domain controller
Thursday, March 10, 2011 6:50 AM
Answers
-
As it is mentioned in this Microsoft article, this problem may be due to a virus. Please run a full scan on your disks to delete all viruses.
Also, have a look to this Microsoft article.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration- Proposed as answer by Arthur_LiMicrosoft contingent staff Friday, March 11, 2011 2:34 AM
- Marked as answer by Arthur_LiMicrosoft contingent staff Friday, March 18, 2011 2:27 AM
Thursday, March 10, 2011 8:43 AM
All replies
-
As it is mentioned in this Microsoft article, this problem may be due to a virus. Please run a full scan on your disks to delete all viruses.
Also, have a look to this Microsoft article.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration- Proposed as answer by Arthur_LiMicrosoft contingent staff Friday, March 11, 2011 2:34 AM
- Marked as answer by Arthur_LiMicrosoft contingent staff Friday, March 18, 2011 2:27 AM
Thursday, March 10, 2011 8:43 AM -
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help.
Arthur Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.Monday, March 14, 2011 2:26 AM -
i did not do scanning in safe mode. Because it is our dc.Any other option?Monday, March 14, 2011 6:30 AM
-
There is no other way out as the safe mode is the best option to scan the system becasue viruses are usually attached to the dll's and system services and antivirus scanner cannot delete those files as those files are already attached to the process Hence they are detactched only in the safe mode.
http://www.virmansec.com/blogs/skhairuddinMonday, March 14, 2011 6:48 AM