ALTERYX INSPIRE | Join us this May for for a multi-day virtual analytics + data science experience like no other! Register Now
1 Day Left! - The Alteryx Community will be temporarily unavailable for a few hours due to implementation of the new SSO experience starting tomorrow at 5pm MDT. Please plan accordingly. For more information, read the blog.

Alteryx Server Knowledge Base

Definitive answers from Server experts.

Schedules being disabled - Event 16969 in Windows Event Viewer

StephenR
Alteryx
Alteryx
Created

Environment Details


This issue shows up as Gallery Schedules for random users being disabled. It is most common with users who's permissions in Gallery are inherited from an Active Directory Group.

 
  • Alteryx Server
    • Version(s) 2019.2.8+
  • Additional Tools
    • Windows Event Viewer
    • Registry Edit

 

Cause


 

This issue is caused by calls to the SAM (Security Account Manager) database being throttled by Windows. You can best identify that this is the issue being faced by navigating to Windows Event Viewer>Windows Logs>System. From there, you can filter the current log by Event 16969. If you see many instances of this error, that is the best sign that you are experiencing this issue.
 

16969Message Text: "%252 remote calls to the SAM database have been denied in the past %251 seconds throttling window.%25n
"%251- "Throttle window:"
%252- "Suppressed Message Count:"

 



Resolution


 

For more information about this error message and the resolution please see the Microsoft Documentation here .

 
  1. Open Registry Editor (regedit.exe)
  2.  Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa  
  3. Right-click and choose New > String Value
  1. Name the new value RestrictRemoteSam
  2. Right-click again and modify the key
    1. Enter the value O:SYG:SYD:(A;;RC;;;BA)(A;;RC;;;AN)
    2. Save the Registry key
  3. The key should look like the below once it is saved to Registry
  4. Verify that the new key is working after some time by looking for Event 16963 in Windows Event System logs
    16963Message Text: "Remote calls to the SAM database are being restricted using the configured registry security descriptor: %251.%25n"

    %251 - "Registry SD String:"