AD Account Lock out problem

[wellscs]

We have a AD account that keeps locking itself out every time we re-enable it. This is stopping the user accessing her OWA webmail and also she can't logon on to the Domain. Any thoughts?

[tosh74]

Check the DC's Security Logs (as a starting point) and filter by the problem account name

[adamf]

This talks about multiple accounts but might have some useful troubleshooting info in it: I moved my PDCE role and accounts started locking out! - Ask the Directory Services Team - Site Home - TechNet Blogs

[DMcCoy]

Often an expired password on a mobile device, iphone/android exchange sync.

[sukh]

Trace the account - Download: Account Lockout Status (LockoutStatus.exe) - Microsoft Download Center - Download Details

[Michael]

We have a AD account that keeps locking itself out every time we re-enable it. This is stopping the user accessing her OWA webmail and also she can't logon on to the Domain. Any thoughts?

 

That's so strange. I've had this exact issue with one user over the past week. Even stranger, I resolved the issue by moving the user's account into an OU, with a linked GPO I created and the problem went away. Really odd behaviour.

[Patrickv]

It maybe that you have someone in your network trying to use that account by guess the password or using a dictionary brute force, or you have your lockout policy to high