| Event Id | 5718 |
| Source | User Accounts Database |
| Description | The UAS Built-in database synchronization failed. |
| Event Information | "According to Microsoft : CAUSE This binary data translates to the Windows NT status code of ""STATUS_SPECIAL_ACCOUNT."" This indicates an illegal operation has been attempted on a reserved (built-in) Security Accounts Manager (SAM) account. For an example, you attempted to delete the Administrator User, Guest User, or a local group such as Administrators. Under normal circumstances, this is not the problem because a user typically is not deleted during a full synchronization procedure. You cannot make the administrator account a non-administrator by removing it from the administrators local group. You cannot disable the administrator account by selecting the ""Disable account"" check box in User Manager. You cannot set the administrator account to expire. These are all the reasons the SAM might return the C0000124 STATUS_SPECIAL_ACCOUNT. RESOLUTION One method to determine the nature of problem is to inspect the SAM on the Primary Domain Controller (PDC) to see if any of the above conditions have occurred and correct them. If you cannot correct the issue via User Manager you may need to reinstall the Backup Domain Controller (BDC) if that is where the issue is manifested. Then allow the PDC to do a full synchronization" |
| Reference Links | The UAS Built-in Database Synchronization |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.