Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Is there a way to locate services/applications running on domain machines using a user's old credentials after a password change?

Posted on 2008-06-23
2
Medium Priority
?
163 Views
Last Modified: 2010-04-21
We just recentely had to migrate some Exchange mailboxes that had become corrupt.  In order to do this, we had to change passwords.  One of the individuals that we had to do this for is a developer and now his account continues to lock every 1-4 minutes because of the group policy (five password failures).  

I have used the account lockout tools from Microsoft's Technet:  Lockoutstatus.exe and EventeCombMT.exe.  These show me time when the user account locks, but not the location.  I need to know if it is possible to locate where this service/application is running in order to change it.  The Developer has claimed not to use his credentials because the passwords are required to change every 90 days.  He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.  

We work with extensive quantities of servers (physical and virtual).  When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.

Does anyone have any ideas?  I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this.  Also, is there any reason to blame this on Exchange?
0
Comment
Question by:Yockos
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 2000 total points
ID: 21846559
http://www.experts-exchange.com/Programming/Languages/Scripting/Shell/Batch/Q_22927122.html

Look at the comment from mse-dwells, contains a batch script to enumerate services and which accounts are being used to run them.
0
 

Author Closing Comment

by:Yockos
ID: 31469745
Thanks for the link.  The script did not work for me, but I am not a scripting phenom either.  There was a link with a tool that did eventually help me locate the services that were causing the user to continually lock out.  thank you
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This month, Experts Exchange sat down with resident SQL expert, Jim Horn, for an in-depth look into the makings of a successful career in SQL.
With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question