Can't start Active Directory Users and Computers

From: Doug Allbright (Doug_allbright@hotmail.com)
Date: 03/20/03 

From: "Doug Allbright" <Doug_allbright@hotmail.com>
Date: Thu, 20 Mar 2003 14:58:35 -0800

Can not start Active Directory Users and computers.
When I double click the icon I get the following error
...
"Naming information cannot be located because:"
"The logon attempt failed"
"Contact your system administrator to verify that your
domain is properly configured and is currently online"
...
In event viewer I see multiple instances of Event ID 1000
It reads "Windows cannot determine the user or computer
name: Return value(1326)
The source is Userenv
the user is NT\Authority system
the computer is the name of the DC

this is all from the application event log
Looking through the other event logs I only see one other
thing that stands out

Event ID 100
Basically a message stating that IUSR_doug50 which i
think is the IIS account has been locked out.
no one can login either
I had an issue few days back when I cam in that morning,
no one could log on. I checked AD and found that
everyones accounts had been locked out.
Seems someone was trying to hack into the sytsem

I can not even start ad now to try and unlock any of the
accounts
Any suggestions would be appreciated
Thanks
Doug

Relevant Pages

  • Re: EcSetRulesSyncError?
    ... > Event Source: MSExchangeIS Mailbox Store ... > An error occurred on database "Disabled Accounts Storage Group\Disabled ... Blitzing all rules in folder 2-1C94FB7 because of rules sync> error ... >> When referring to an event log entry always post the entire event log ...
    (microsoft.public.exchange.misc)
  • Re: Being hacked...
    ... nor have the attacks dimminished. ... I have the accounts locked out forever ... I've installed an event log analyzer to help with event log ... Looking at your firewall logs might help as well, ...
    (microsoft.public.win2000.security)
  • Re: Cant start Active Directory Users and Computers
    ... > When I double click the icon I get the following error ... > "Contact your system administrator to verify that your ... > this is all from the application event log ... > everyones accounts had been locked out. ...
    (microsoft.public.win2000.security)
  • Re: Users accounts locking for no apparent reason
    ... Check the event log on your DC, maybe someone is trying to brute-force ... > AD and unlocking various accounts! ... > password, I've re-set it, but still within about 5 minutes ... > expire this starts. ...
    (microsoft.public.exchange2000.admin)
  • RE: IIS 6.0 COM App cant write to event log
    ... In fact, event log is used for the system administrator to maintain the box so that from your test, only the administrators account group can write to ... For more information about the right and privilege for event logging, I'd suggest you can find detailed event log security informaton from ... Microsoft Product Support Services ...
    (microsoft.public.inetserver.iis.security)