Account Lockout

[max_carpenter]

Evening All,

 

Recently we enabled account lockout policy in GP however this has resulted in a few select accounts locking out repeatedly or even constantly for no apparent reason. We cannot see any services or software running under these accounts and the staff are not even always at the machines. We have failure and sucesses auditing on but the calling workstation is always blank.

 

I have tried using both Microsofts and a 3rd party tool for analysing why an account is locked out but drawing blanks.

 

Anyone got any advice?

 

Thanks,

Max

[FN-GM]

Usually 1 of 2 things

 

1. An email client on a mobile, tablet etc using an old password to connect to the mailbox.

2. A device trying to Connect to Radius service such as WIFI with an old password.

[max_carpenter]

Thanks for the prompt response, Thats helpful thanks. Why they can't list these things in the event log would help.

 

I will speak with my apprentice tomorrow because I beleive he has checked at least one user for both of those things and reports that neither was the case but worth double checking.

[FN-GM]

It could be a forgotten tablet sat at home causing the issues. Known that to happen in the past.

[max_carpenter]

Very true!

[AliG]

Web proxy authentication? Smoothwall?

[max_carpenter]

No we dropped smoothwall and proxies along with it long ago