none
Account locked out daily RRS feed

  • 問題

  • I have a Windows 2003 server which cause my account locked out daily. Even I have reboot that server and remove my profile, the problem still occur.
    There is no service is using my account to run and no IIS have been installed on that server. Also there were no event at sys log and app log at the same time when the account got lock.

    Below is the eventlog

    Event Type: Failure Audit
    Event Source: Security
    Event Category: Logon/Logoff
    Event ID: 539
    Date: 10/10/2007
    Time: 4:33:12 PM
    User: NT AUTHORITY\SYSTEM
    Computer: ASIHK******
    Description:
    Logon Failure:
    Reason: Account locked out
    User Name: dickson
    Domain: asia
    Logon Type: 2
    Logon Process: Advapi 
    Authentication Package: Negotiate
    Workstation Name: ASIHK******
    Caller User Name: ASIHK******$
    Caller Domain: ASIA
    Caller Logon ID: (0x0,0x3E7)
    Caller Process ID: 2428
    Transited Services: -
    Source Network Address: -
    Source Port: -


    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    2007年10月11日 上午 06:00

解答

  • 你應該查查看ASIHK******那台電腦為什麼會嘗試使用dickson這個帳號登入,是不是中毒了。

    2007年10月15日 下午 08:15