Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Is there a way to locate services/applications running on domain machines using a user's old credentials after a password change?

Posted on 2008-06-23
2
159 Views
Last Modified: 2010-04-21
We just recentely had to migrate some Exchange mailboxes that had become corrupt.  In order to do this, we had to change passwords.  One of the individuals that we had to do this for is a developer and now his account continues to lock every 1-4 minutes because of the group policy (five password failures).  

I have used the account lockout tools from Microsoft's Technet:  Lockoutstatus.exe and EventeCombMT.exe.  These show me time when the user account locks, but not the location.  I need to know if it is possible to locate where this service/application is running in order to change it.  The Developer has claimed not to use his credentials because the passwords are required to change every 90 days.  He has also looked at every possibility, including his Motorola Q, notebook, desktop, etc.  

We work with extensive quantities of servers (physical and virtual).  When I use the EventCombMT.exe application to look through all events on those servers, there is nothing of value.

Does anyone have any ideas?  I would really help that I don't have to manually look through all the services and scheduled tasks on all the 50+ servers for this.  Also, is there any reason to blame this on Exchange?
0
Comment
Question by:Yockos
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 500 total points
ID: 21846559
http://www.experts-exchange.com/Programming/Languages/Scripting/Shell/Batch/Q_22927122.html

Look at the comment from mse-dwells, contains a batch script to enumerate services and which accounts are being used to run them.
0
 

Author Closing Comment

by:Yockos
ID: 31469745
Thanks for the link.  The script did not work for me, but I am not a scripting phenom either.  There was a link with a tool that did eventually help me locate the services that were causing the user to continually lock out.  thank you
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question