Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Error code C0000072

Error code
0xC0000072
Type
Description
User logon to account disabled by administrator

Comments

Rich Ailes
I had this error crop up with a companion error in the system log: The Security System detected an authentication error for the server cifs/FQDNservername.  The failure code from authentication protocol Kerberos was "The referenced account is currently disabled and may not be logged on to.(0xc0000072)".

Turned out to be a user on a Terminal Server who'd been let go by the company, whose account had been deactivated. Their session was still running. Once I logged off the user using TS Manager, all was well.

Search

Keywords: error code 0xC0000072 and Win32: Google - Bing - Microsoft - Yahoo

Keywords: User logon to account disabled by administrator: Google - Bing - Microsoft - Yahoo

Feedback
If you have additional details about this error code, please send it to us

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...