locked
Account Lockout RRS feed

  • Question

  • I have a issue where a user account is getting locked every 30 secs. Now if I read from Lockout Status Tool it gives me the Original DC. And when i go to the DC I get the log below:
    --------------------------Event Log from DC----------------------------------------
    A user account was locked out.
    Subject:
     Security ID: SYSTEM Account Name:DC01$
     Account Domain:mydomain
     Logon ID:0x3e7
    Account That Was Locked Out:
     Security ID:MJN\abc
     Account Name:abc
    Additional Information:
     Caller Computer Name:Exch2 (Hub Cas Server)
    --------------------------Event log from Exchange Server----------------------------------------
    Further If I read the log from the hub cas server i get the below entry
    An account failed to log on.
    Subject:
     Security ID: NETWORK SERVICE
     Account Name:SBYPRDHCX2$
     Account Domain:abc
     Logon ID:0x3e4
    Logon Type: 3
    Account For Which Logon Failed:
     Security ID: NULL SID
     Account Name:abc
     Account Domain:
    Failure Information:
     Failure Reason:Account locked out.
    Status: 0xc0000234
    Sub Status:0x0
    Process Information:
    Caller Process ID:0x1674
    Caller Process Name:D:\E2k7\Bin\EdgeTransport.exe
    Network Information:
    Workstation Name:Exch2 (Hub Cas Server)
    Source Network Address:-
    Source Port:-
    Detailed Authentication Information:
    Logon Process:Advapi  
    Authentication Package:MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
    Transited Services:-
    Package Name (NTLM only):-
    Key Length:0
    -----------------------------------------------------------------------------------------------
    Unable to determine what is the possible cause which is calling the EdgeTransport.exe. Have any one come across this scenario.  

    Sujit
    Sunday, April 10, 2011 1:48 PM

Answers

All replies