Account lockout caused by exchange server

[andy_nic]

Hi All,

Ok I've got a user who keeps getting locked out, I've ran a PowerShell script which tell me that the exchange server caused the lockout. is there anyway i can find which devices are connecting to exchange for this user so i can update password on the device. as i suspect the user has changed her password and it is cached somewhere.

 

Its a 2010 Exchanged.

 

Thank you

[Domino]

If it's an internal device they'll be a record in the security event log of the exchange server that shows the device name.

 

IIRC activesync won't show this. And external devices will show the firewall/publishing device as the machine locking the account.

 

It's also possible they've ticked the 'remember my password' option in outlook on a device, which in vista and above will mean the credential is stored in control panel>credentials manager

[sukh]

check activesync device against that user. Will tell you how many and what devices are connected for that mailbox.