Windows Server 2008 R2 Thread, User AD lockout in Technical; Hi All,
i have a user who keeps geting locked out every 1-2 hours is there any log which i ...
3rd September 2013, 03:44 PM #1
User AD lockout
i have a user who keeps geting locked out every 1-2 hours is there any log which i can look at to see roughty what is causing this to happen?
3rd September 2013, 04:55 PM #2
You need to look at the Security audit logs on your DCs - more specifically the Failure entries as this will tell you which computer is locking the account out.
I had one very recently where a user account was added to the Credential Manager on a non-domain PC allowing the user to print from that machine. We have a password policy which changes the password every 90 days, of course the one on the standalone didn't get changed locking that user out every 5 minutes.
Thanks to Shielder from:
andy_nic (4th September 2013)
3rd September 2013, 05:32 PM #3
Ive got the same thing. I'm resorting to wireshark soon as I can't identfy the process which is causing the lock out. Ive tried a fresh pc so its not in the profile we use local. Her phone had exchange cresentials now removed. Dc logs show the failures from the pc.
By jmair in forum Windows Server 2008
Last Post: 22nd August 2010, 02:04 PM
By Little-Miss in forum Learning Network Manager
Last Post: 14th September 2009, 03:03 PM
By k-strider in forum Windows 7
Last Post: 14th July 2009, 12:29 PM
By tarquel in forum Windows
Last Post: 24th October 2006, 08:53 AM
By SpuffMonkey in forum Scripts
Last Post: 8th November 2005, 10:31 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)