Administrator Account Locked Out Daily.

[hollowpoint1999]

Hello Folks!

Okay, I've been running into a problem with the Administrator account for my NT Server 4.0 domain. I changed the Administrator password last week. Every day since the account is locked out when I get to site in the morning. I'm assuming that one of the services is still configured to use the old password and is trying the account until it locks out. The Event Veiwer message gives me the date, time following details:


Event ID: 529
Source: Security
Type: Failure Audit
Computer: DOMAIN_PDC
Category: Logon/Logoff

Logon Failure:
Reason: Unknown user name or bad password
Username: Service
Domain:
Logon Type: 3
Logon Process: KSecDD
Authentication Package: MICROSOFT_AUTHENTICATION PACKAGE_V1_0
Workstation Name: DOMAIN_BDC

This message occurs three times at 1:10a and then in sets of three every five minutes for half an hour. After the first few it changes to "Account Locked Out' for the reason. How do I go about determining what service is causing this? Any help i smuch apprectiated. Thanx.

Chris.

[SMS Avenger]

go to the BDC's and look at each service to see which one is set with the admin username and password,

or you can rename the administrator account so it won't get locked out

[patweb]

I bet the Service account is the account used to install Exchange server? Did you change this password too?
>>"Username: Service"
Is Exchange server on the machine that the message appears.
I have seen this problem that some exchange services fail to start after changing the Service account password.
Unfortunately I don't know the fix (I just changed mine back after an exasperating effort to fix it). If someone else knows....