We could check several things to see whats cause. The KB in the link : https://kb.bmc.com/infocenter/index?page=content&id=KA307612&actp=search&viewlocale=en_US&searchid=1321509466109 talks about all the probable causes of this error.

On how many machines are you getting this error message? I have worked on a similar problem in the past and the KB Talks about the resolution.

Hope this helps.

Hi,

we see the similiar error in our environment and this is occuring after the reboot of a server.

We see this particular problem with RSCD 8.1 SP2.

Besides the long and detailed description in the KB article i believe this was fixed in one of the patches for RSCD 8.1 SP2.

We are currently using 8.1 SP2 - Patch4 and never ran into this problem again.

Regards

Steffen

The issue that you are talking about was fixed in 8.1 SP2Patch4 and 8.1 SP1 Patch3 and 8.0 SP10 or SP11.

You can also check the registry key

In regedit32, Use the Registry Editor to save, delete and replace value entry CrashOnAuditFail, under

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Values the key can be set to:

0 - Anyone may log on. This is the default value.

1 - Anyone may log on if the system can audit the events and write the events to the security event log. If the security event log is full, the value for the CrashOnAuditFail key is changed to 2, and the server crashes.

2 - Only administrators may log on.( This is the problem.)

-Prabhat

Perfect. I think this is the issue that was was fixed in 8.1 SP2Patch4and 8.1 SP1 Patch3 and 8.0 SP10 or SP11.

was this happening during a reboot and/or deploy ?

Bill,

I have this happening during a deploy:

06/12/12 13:03:18.280 ERROR    rscd - SERVER 1276 ÿÿÿÿÝù‚|”¼æw (???): ???: [listen_thread:_bl_create_user] :This operation is only allowed on the primary domain controller of the domain.(Could not create the BladeLogic unprivileged user. Expect failures in userprivilege mapping mode.)

06/12/12 13:03:18.296 ERROR    rscd - SERVER 1276  (???): ???: listen_thread ERROR: 9002:Internal Error- Caught exeception.

06/12/12 13:03:18.296 ERROR    rscd - SERVER 1276  (???): ???: UnInitAgent:DsServerRegisterSpn(DELETE_SPN_OP) failed 0x00045b.

And have no idea why... It is only using local users so I'm not sure why it's referring to the DC.

ERROR    rscd -  PBBSAA335 2560 SYSTEM (???): ???: [listen_thread:RSCD_WinUser::logonPassword:LsaLogonUser()] : Logon failure: unknown user name or bad password. (BladeLogicRSCD@PBBSAA335)

The original issue was with BladeLogiRSCD user account, so unisntalling and reinstalling the agent fixed the issue by removing this account. In the future you can just delete the BladeLogicRSCD user account and restart the agent. I would delete the user like this:

- In System Properties / Advanced / User profiles delete the BladeLogicRSCD account (this deletes the files and registry for this user)

- Delete the BladeLogicRSCD user account from the Users and Groups

- Restart the agent.

To answer the question abotu the agent lockout after reboot, that could be because the dependant services have not started, causing the user lockout.. Make sure that BladeLogic RSCD Agent service has two dependencies Netlogon and Server, and if not, run this command:

sc config RSCDsvc depend= Netlogon/LanmanServer

This worked for me, Thanks Lazar