Event ID 14 - Windows 2016 Server Standard - RDS

Question

Hello, We are having a very strange issue on one of our RDS servers. Indeed, every hour (even at night), we have the following error: ![255552-image.png][1] It is always using the same user AD account and we didn't find any scheduled task associated and of course, thise AD user is not always connected. If we activate the domain policy that locks the accounts after X attempts, this user is automatically locked. What could be the problem? Regards [1]: /api/attachments/255552-image.png?platform=QnA

Answer 1

Hi

This event is logged when there were password errors using the Credential Manager. If your password has changed and is stored on the local computer, you must change the stored password to the new password.You can change the stored password by using Stored User Names and Passwords.

To change the stored password by using Stored User Names and Passwords:

1. Click Start, and then click Control Panel.
2. Double-click User Accounts.
3. Click Manage User Accounts.
4. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
5. Click the Advanced tab, and then click Manage Passwords.
6. In the Stored User Names and Passwords dialog box, click the appropriate user account, and then click Edit.
7. In the Password box, type the correct PIN, and then click OK.
8. Click Close.

Verify

To verify that the stored password is configured correctly:

1. Log off of the computer and then log back on.
2. Attempt to access a remote resource on a server that is using Kerberos authentication.
3. If the resource can be accessed, the stored password has been configured correctly.

Best Regards,
Wesley Li