Is there a way to locate services/applications running on domain machines using a user's old credentials after a password change?

Posted on 2008-06-23
Medium Priority
Last Modified: 2010-04-21
We just recentely had to migrate some Exchange mailboxes that had become corrupt.  In order to do this, we had to change passwords.  One of the individuals that we had to do this for is a developer and now his account continues to lock every 1-4 minutes because of the group policy (five password failures).  

I have used the account lockout tools from Microsoft's Technet:  Lockoutstatus.exe and EventeCombMT.exe.  These show me time when the user account locks, but not the location.  I need to know if it is possible to locate where this service/application is running in order to change it.  The Developer has claimed not to use his credentials because the passwords are required to change every 90 days.  He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.  

We work with extensive quantities of servers (physical and virtual).  When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.

Does anyone have any ideas?  I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this.  Also, is there any reason to blame this on Exchange?
Question by:Yockos
LVL 30

Accepted Solution

LauraEHunterMVP earned 2000 total points
ID: 21846559

Look at the comment from mse-dwells, contains a batch script to enumerate services and which accounts are being used to run them.

Author Closing Comment

ID: 31469745
Thanks for the link.  The script did not work for me, but I am not a scripting phenom either.  There was a link with a tool that did eventually help me locate the services that were causing the user to continually lock out.  thank you

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In my humble opinion (IMHO), TouchDown from Symantec is the best in class for this type of application, but Symantec has end-of-lifed it and although one can keep using it, it will no longer be supported or upgraded.  Time to look for alternatives t…
Seizing the Operation Master Roles in Windows Server 2016 in case of FSMO holder failure.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question