?
Solved

Is there a way to locate services/applications running on domain machines using a user's old credentials after a password change?

Posted on 2008-06-23
2
Medium Priority
?
162 Views
Last Modified: 2010-04-21
We just recentely had to migrate some Exchange mailboxes that had become corrupt.  In order to do this, we had to change passwords.  One of the individuals that we had to do this for is a developer and now his account continues to lock every 1-4 minutes because of the group policy (five password failures).  

I have used the account lockout tools from Microsoft's Technet:  Lockoutstatus.exe and EventeCombMT.exe.  These show me time when the user account locks, but not the location.  I need to know if it is possible to locate where this service/application is running in order to change it.  The Developer has claimed not to use his credentials because the passwords are required to change every 90 days.  He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.  

We work with extensive quantities of servers (physical and virtual).  When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.

Does anyone have any ideas?  I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this.  Also, is there any reason to blame this on Exchange?
0
Comment
Question by:Yockos
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 2000 total points
ID: 21846559
http://www.experts-exchange.com/Programming/Languages/Scripting/Shell/Batch/Q_22927122.html

Look at the comment from mse-dwells, contains a batch script to enumerate services and which accounts are being used to run them.
0
 

Author Closing Comment

by:Yockos
ID: 31469745
Thanks for the link.  The script did not work for me, but I am not a scripting phenom either.  There was a link with a tool that did eventually help me locate the services that were causing the user to continually lock out.  thank you
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month9 days, 17 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question