Need to resolve Event 4136
Mike
We have been having a problem with a domain account getting locked out. In
the security log, I have found entries such as:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/6/2009
Time: 5:59:27 PM
User: NT AUTHORITY\SYSTEM
Computer: <systemname>
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: <username>
Domain: <domain name>
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: <systemname>
Caller User Name: <systemname>$
Caller Domain: NA
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1580
Transited Services: -
Source Network Address: -
Source Port: -
(where the Caller Process ID with either be that of cisvc.exe or
cidaemon.exe)
Eventually the account gets locked out and affects the entire application.
In the application event log I will see events such as this:
Event Type: Error
Event Source: Ci
Event Category: CI Service
Event ID: 4136
Date: 10/6/2009
Time: 6:04:52 PM
User: N/A
Computer: <systemname>
Description:
<CiDaemon | Indexing Service> failed to logon <domain name>\<username>
because of error 1326.
From the MS Help & Support Center, I found the following:
------------------------------------------
Details
Product: Windows Operating System
ID: 4136
Source: Ci
Version: 5.0
Component: Application Event Log
Symbolic Name: MSG_CI_REMOTE_LOGON_FAILURE
Message: %1 failed to logon %2 because of error %3.
Explanation
This event record usually means you have entered the wrong password for a
universal naming convention catalog.
User Action
Try reentering the correct password.
------------------------------------------
So, this tells me that an incorrect password was entered for a UNC for a
seach catalog directory path. However, when I open the MMC for ciadv.msc, I
can see where to enter a user and password when creating a new directory,
but I can't find any way of finding the username of the existing directories
in order to update the password.
Is there some way I can determine the username of the existing directories?
Thanks!
Mike