Event ID - 2538

Event Id2538
SourceMicrosoft-Windows-ActiveDirectory_DomainService
DescriptionThe directory server has detected that the service account used to run this service has been changed. Replication failures may occur if two or more Active Directory Lightweight Directory Service instances in the same configuration set simultaneously change the service accounts under which those instances are running. Additional Data Old service account: %1 New service account: %2
Event Information According to Microsoft :

Cause :

This event is logged when the directory server has detected that the service account used to run this service has been changed.

Resolution :

Wait until replication is complete before updating additional service accounts

Ensure that ample time is allowed for replication to occur before you make changes to service accounts of other instances in the configuration set.

Verify :

To perform these procedures, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To verify that the Active Directory Lightweight Directory Services (AD LDS) service instance is running using a command prompt:
  1. Open a command prompt. To open a command prompt, click Start . In Start Search , type cmd , and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue .
  2. At the command prompt, type wmic service list brief , and then press ENTER.
  3. Locate the AD LDS instance name in the command output, and verify that the AD LDS instance service is listed as running.
  4. If the service is not running, type net start serviceName, and then press ENTER. Substitute the name of the service for serviceName. For example, if the instance service name is ADAM_Instance1, type net start adam_instance1 , and then press ENTER.
To verify that the AD LDS service instance is running using Server Manager:
  1. Open Server Manager. To open Server Manager, click Start , in Start Search , type servermanager.msc , and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue .
  2. Double-click Roles , and then click Active Directory Lightweight Directory Services .
  3. In the details pane, locate the list of System Services and their status. If a service instance is not running, you can click Start in the details pane to try to start the service.
If the service is running, the service account configuration is correct.
Reference LinksEvent ID 2538 from Microsoft-Windows-ActiveDirectory_DomainService

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.