Skip to main content

Schedule2 service generating event logs due to disabled account - Need to change account setting.

Thread needs solution

We have a server that is generating a ton of event log files showing the following error (see below).  As a bit of background, we've disable a previous admin users account as they have left the business but somehow it seems tied to the Acronis schedul2.exe program.

When we restart the Acronis services on the server in question, they restart all ok and are configured to use the Local System Account.

 

So my question is, what is causing this and how can I change it?

 

Account For Which Logon Failed:

                Security ID:                            NULL SID
                Account Name:                     psmith
                Account Domain:                  co

Failure Information:

                Failure Reason:                      Account currently disabled.
                Status:                                    0xC000006E
                Sub Status:                            0xC0000072

Process Information:

                Caller Process ID:  0xcfc
                Caller Process Name:            Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

Network Information:

                Workstation Name:              UK-SQLDBSVR
                Source Network Address:    -
                Source Port:                          -

Detailed Authentication Information:

                Logon Process:                     Advapi 
                Authentication Package:     Negotiate
                Transited Services:                -
                Package Name (NTLM only):              -
                Key Length:                           0

0 Users found this helpful

Hello Leonard Powers!

Is this a server for Acronis, or do you mean it's a server OS with an Acronis Agent? Have you tried redeploying the backup plan? Do you notice this event log error with all your machines?

You could also see if there are any tasks scheduled with this: https://kb.acronis.com/SchedulerManager

There's also a documentation about what the services require here (section 10): https://dl.acronis.com/u/pdf/AcronisCyberBackup_12.5_BP_en-US.pdf

-- Peter

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 0
Comments: 2016

Hello Leonard,

Welcome to Acronis forums!

This problem can appear if there is a plan which was scheduled to run under this account with the wrong credentials. If you need help to localize this issue, please share the system report from the affected system and the export of the error from the Windows event viewer with the exact time when the error appeared. It is required to compare with the information in the report. Please upload the logs to an FTP link that I've sent you in a private message.