I am receiving the following error in the event viewer. It starts at 1:02 am and stops at 2:02 am every night. The message comes up approximately 2,000 times in that one hour time period. The server that it is happening on is running MS Server 2000 SP4. The messages started a few weeks back and occur every night in that specific time period. The account that the message is referring to is my account. I have admin level privelages on the network, though I have not, nor anyone else in the company installed anything that would be trying to logon with my account. I looked at all the services on the server and none of them are configured to use my account name to run.

This is the error (obviously, I didn't put in my account name or the domain name). At this point I have a feeling it might be a virus/spyware or something malicious, but I would like to exhaust all other possibilities before I proceed.


DCOM got error "Logon failure: unknown user name or bad password. " and was unable to logon 'Domain Name\Administrator Name' in order to run the server:
{B2B30542-D976-11D3-B188-0040056AC398}

It might be to do with your lease this is just a stab in the dark but have heard of this problem before and this resolved it, same symptons.

Not necessarily related but it sure looks like it could be and sheds some light on the nature of the problem: http://support.microsoft.com/default...b;en-us;255770

I am actually running into the same problem. However it did so when i changed my back admin password. anyone knows how to take care of it?

what version of microsoft are you running?

I had the same issue with a MS SQL Great Plains Server. The way I fixed it was:

1. Go to Start > Programs > Administrative Tools > Component Services

2. Expand the Component Services > Computers > My Computer > COM+ Applications.

3. Select the application in question (in my case it was eConnect 9), right click on it and choose "Properties".

4. Click on the Identity Tab. On that tab there is a "This user:" radio button which contains the username and password that my Component is using. Simply change the user login information there and restart your machine.

I hope this helps.

Pete Soheil
DigiOz Multimedia
http://www.digioz.com