Is there a way to locate services/applications running on domain machines using a user's old credentials after a password change?
We just recentely had to migrate some Exchange mailboxes that had become corrupt. In order to do this, we had to change passwords. One of the individuals that we had to do this for is a developer and now his account continues to lock every 1-4 minutes because of the group policy (five password failures).
I have used the account lockout tools from Microsoft's Technet: Lockoutstatus.exe and EventeCombMT.exe. These show me time when the user account locks, but not the location. I need to know if it is possible to locate where this service/application is running in order to change it. The Developer has claimed not to use his credentials because the passwords are required to change every 90 days. He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.
We work with extensive quantities of servers (physical and virtual). When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.
Does anyone have any ideas? I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this. Also, is there any reason to blame this on Exchange?
I have used the account lockout tools from Microsoft's Technet: Lockoutstatus.exe and EventeCombMT.exe. These show me time when the user account locks, but not the location. I need to know if it is possible to locate where this service/application is running in order to change it. The Developer has claimed not to use his credentials because the passwords are required to change every 90 days. He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.
We work with extensive quantities of servers (physical and virtual). When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.
Does anyone have any ideas? I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this. Also, is there any reason to blame this on Exchange?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER