I have a users accout who keeps getting locked out. I was able to locate the computer passing the bad credentials. It seems everytime tivoli would start a process it's causing him to lockout. For example, the Tivoli orb process starts and the next log is the one listed below. I stopped the Tivoli service for a few days and lockouts stopped. I renabled it and sure enough they persisted. I reinstalled tivoli on the machine to no avail. This is happening on multiple boxes. Has anyone seen this with Tivoli?
__________________________
__________
__________
__________
__________
__________
______
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 3/20/2008
Time: 2:05:54 PM
User: NT AUTHORITY\SYSTEM
Computer: workstation
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: user
Domain: domain
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: workstation
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.