Hi, I have this Event ID:12294 log every 1 minute in the system event viewer. The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above. Any idea why this event is logged? It only happened last week. All the servers and clients are with latest service pack and no viruses was found.