locked
Account locked out RRS feed

  • Question

  • Since a user changed his password the users get locked out 3 times a day. Is there any tool, logging available which kan detect which program / process this locking is causing. I now I can check for failures in the DC security log to find the correct computer which locks the computer but how can I find the specific program which locks the account?

     

    Friday, July 15, 2011 8:19 AM

Answers

All replies

  • You can refer below link for tools. Netwrix is the proved tool.

    Troubleshooting account lockout issues

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/cddbf977-b98f-4783-8226-ebddab54d002/

     

    Regards


    Awinish Vishwakarma 

    MVP-Directory Services

    MY BLOG: awinish.wordpress.com

    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Friday, July 15, 2011 8:28 AM
  • Hello,

    you can also try to get information from event viewer: example the used computer for the failed authentication ...

    Once identified, run services.msc on this computer and check if there is a service that is running under this user. If you found it, then change the password of this account.

    For applications, identify which ones are running on this computer and check their settings.

     

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

     


    Friday, July 15, 2011 9:07 AM
  • I have a artcile to assist you in tracking down the lockout at:
    http://www.pbbergs.com/windows/articles.htm
    Select User Account Lockout Troubleshooting

    Note: If in the logs you notice a router as the source of the lockout, it is most likely a handheld device such as a mobile phone.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    Friday, July 15, 2011 12:28 PM
  • See this

    http://blogs.technet.com/b/askds/archive/tags/account+lockout/


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
    Friday, July 15, 2011 12:44 PM