• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 245
  • Last Modified:

Service account locking out every 10 minutes


I Have a service account that keeps locking out every 10 minutes or so. It seems like it is one of the automated processes, but I can't tell which one since it runs on multiple windows machines.

Is there an easy way to track down which process and server this could be coming from?

We are a Windows 2003 Active Directory with 2003  full functional level and 6 Domain Controllers in this Site

The machines that use this account are windows 2000 Server and windows 2000 Pro.

Thank you,
1 Solution
I would look in the security event log on one of the domain controllers.  You can right-click the security log, click view, then find.  In the description section, type the service account name and it should highlight the event.  The event will contain the computer the account is being locked out from.  The event id should be 644.  You can search or filter by that also.

Featured Post

What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now