[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

How to unlock an Account locking out immediately after I unlock it!!

I have a user that it appears put the wrong password in. She said she didn't. However, it keeps saying account is locked out. I go into the server and uncheck the lockout button, hit apply and ok. Then if I immediatly go back into the profile it is locked out again whether I tried to login as her or not.
0
aando
Asked:
aando
  • 4
  • 2
3 Solutions
 
suppsawsCommented:
Hello aando,

did you check the server security logs?

Regards,

suppsaws
0
 
KCTSCommented:
It sounds like some service or schedule task is set to use the old credentials - check.
0
 
aandoAuthor Commented:
1. I cleared the security log and then immediately hit refresh. Two seperate accounts had already tried to login and fail over 100 times.

2. How do I check for services that may be using a old password?

3. Also, another strange thing is that the two accounts that keep doing this are logging onto two Vostro machines that we just formatted and reinstalled. They had Vista, we formatted and put XP Pro on them.
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
KCTSCommented:
use this script - I can't remember where I got if from - but it works

strComputer = ""
Set objWMIService = GetObject  ("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServices = objWMIService.ExecQuery ("Select * From Win32_Service")

For Each objService in colServices
    Wscript.Echo objService.Name, objService.StartName
Next
0
 
aandoAuthor Commented:
This is what I am getting every millisecond.

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      675
Date:            4/1/2009
Time:            8:55:04 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SBS2K3
Description:
Pre-authentication failed:
       User Name:      kouimet
       User ID:            MAS\kouimet
       Service Name:      krbtgt/MAS.LOCAL
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:      192.168.26.12


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 
aandoAuthor Commented:
When I run the script I get an error. I am sure I am doing something wrong. Do I have to change that script in anyway?
0
 
aandoAuthor Commented:
http://www.experts-exchange.com/Security/Win_Security/Q_20418480.html#a7549099

This post tells how to fix it. I followed it and the errors stopped.....
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now