win 2k error

Archived from groups: microsoft.public.win2000.general (More info?)

i keep getting this error message every 2 hrs in application log in win 2k
advanced server sP4. it is a BDC

event id 1000
source userenv
category none

description
windows cannot determine the user or computer name. return value (1326).

i read about relating to trojan virus in one of microsoft articles. but i
scanned the server and found no viurs and the virus definitions are up-date.
the server is patched also.

any quick help is appreciated.

Archived from groups: microsoft.public.win2000.general (More info?)

hi
what you say could be correct. becoz i checked the application log and the
error message comes exactly next day from the date i changed domain admin
password
and password for another user account that has domain admin rights.

there is no scheduled job in this member server.

but how do i find if any service or replication account is tryning to run
with the old password

thanks for the help
your help is very much appreciated.


"Jerold Schulman" wrote:

> On Tue, 12 Apr 2005 02:58:02 -0700, "sridhar" <sridhar@discussions.microsoft.com> wrote:
>
> >i keep getting this error message every 2 hrs in application log in win 2k
> >advanced server sP4. it is a BDC
> >
> >event id 1000
> >source userenv
> >category none
> >
> >description
> >windows cannot determine the user or computer name. return value (1326).
> >
> >i read about relating to trojan virus in one of microsoft articles. but i
> >scanned the server and found no viurs and the virus definitions are up-date.
> >the server is patched also.
> >
> >any quick help is appreciated.
>
> Using net hel;pmsg, tip 161 in the 'Tips & Tricks' at http://www.jsifaq.com,
> 1326 is:
> Logon failure: unknown user name or bad password.
>
> How about a schedule job, or service account, or replication account, that is attempting to log on with a changed password.
>
>
> Jerold Schulman
> Windows Server MVP
> JSI, Inc.
> http://www.jsiinc.com
>