Event ID 16403 — The error "AccountName" occurred when trying to create the well known account Name.
Description
The error "AccountName" occurred when trying to create the well known account Name. Please contact PSS to recover.
Message #
Fields #
| Name | Description |
|---|---|
Name | — |
AccountName UnicodeString | — |
ErrorMessage UnicodeString | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Directory-Services-SAM",
"guid": "0D4FDC09-8C27-494A-BDA0-505E4FD8ADAE",
"event_source_name": "",
"event_id": 16403,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2022-04-07T08:14:31.644632+00:00",
"event_record_id": 638,
"correlation": {},
"execution": {
"process_id": 648,
"thread_id": 652
},
"channel": "System",
"computer": "WIN-FPV0DSIC9O6.lab.local",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Name": "SAMMSG_USER_SETUP_ERROR",
"AccountName": "WDAGUtilityAccount",
"ErrorMessage": "The specified network password is not correct.\r\n",
"Binary": "56000000"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline