Re: Can't start Active Directory Users and Computers

From: Steven L Umbach (n9rou@attbi.com)
Date: 03/21/03 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Fri, 21 Mar 2003 02:13:20 GMT

      Hi Doug. This might be worth checking out. --- Steve

http://www.jsiinc.com/SUBF/TIP2800/rh2859.htm
http://www.jsiinc.com/SUBL/tip5800/rh5804.htm

"Doug Allbright" <Doug_allbright@hotmail.com> wrote in message
news:222001c2ef34$3c6dc580$a001280a@phx.gbl...
> Can not start Active Directory Users and computers.
> When I double click the icon I get the following error
> ...
> "Naming information cannot be located because:"
> "The logon attempt failed"
> "Contact your system administrator to verify that your
> domain is properly configured and is currently online"
> ...
> In event viewer I see multiple instances of Event ID 1000
> It reads "Windows cannot determine the user or computer
> name: Return value(1326)
> The source is Userenv
> the user is NT\Authority system
> the computer is the name of the DC
>
> this is all from the application event log
> Looking through the other event logs I only see one other
> thing that stands out
>
> Event ID 100
> Basically a message stating that IUSR_doug50 which i
> think is the IIS account has been locked out.
> no one can login either
> I had an issue few days back when I cam in that morning,
> no one could log on. I checked AD and found that
> everyones accounts had been locked out.
> Seems someone was trying to hack into the sytsem
>
> I can not even start ad now to try and unlock any of the
> accounts
> Any suggestions would be appreciated
> Thanks
> Doug
>

Relevant Pages

  • Cant start Active Directory Users and Computers
    ... "Naming information cannot be located because:" ... "Contact your system administrator to verify that your ... this is all from the application event log ... everyones accounts had been locked out. ...
    (microsoft.public.win2000.security)
  • Re: EcSetRulesSyncError?
    ... > Event Source: MSExchangeIS Mailbox Store ... > An error occurred on database "Disabled Accounts Storage Group\Disabled ... Blitzing all rules in folder 2-1C94FB7 because of rules sync> error ... >> When referring to an event log entry always post the entire event log ...
    (microsoft.public.exchange.misc)
  • Re: allow users to change their own passwords
    ... Wes Groleau wrote: ... allows me to set the password policies for regular users? ... I am the system administrator, and have set up accounts for everyone ...
    (comp.sys.mac.system)
  • Re: Being hacked...
    ... nor have the attacks dimminished. ... I have the accounts locked out forever ... I've installed an event log analyzer to help with event log ... Looking at your firewall logs might help as well, ...
    (microsoft.public.win2000.security)
  • Re: Users accounts locking for no apparent reason
    ... Check the event log on your DC, maybe someone is trying to brute-force ... > AD and unlocking various accounts! ... > password, I've re-set it, but still within about 5 minutes ... > expire this starts. ...
    (microsoft.public.exchange2000.admin)