Locked out Account, how to know which computer has locked out this user?!

Hi everybody,
I used a shared account for the development, and this user account is locked out many times per day. I wanted to khow how to find which computer has locked out this user?!
Thanks in advance for your help.
Best Regards
sungarditAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Toni UranjekConsultant/TrainerCommented:
Hi!

Check your domain controllers security logs. Event 644 wil be recorded when user is locked out. Check this event for workstation name or IP. If it is not recorded search for events 675. This event is recorded when user enters bad password. This event conteins the following information amongst others: "Client Address".

HTH

Toni
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sungarditAuthor Commented:
Hi Tony,
Thank you for your quick answer. I found exactly what I wanted in event 644.
Regards
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.