Improve company productivity with a Business Account.Sign Up

x
?
Solved

How to unlock an Account locking out immediately after I unlock it!!

Posted on 2009-04-01
7
Medium Priority
?
332 Views
Last Modified: 2012-05-06
I have a user that it appears put the wrong password in. She said she didn't. However, it keeps saying account is locked out. I go into the server and uncheck the lockout button, hit apply and ok. Then if I immediatly go back into the profile it is locked out again whether I tried to login as her or not.
0
Comment
Question by:aando
  • 4
  • 2
7 Comments
 
LVL 21

Assisted Solution

by:suppsaws
suppsaws earned 200 total points
ID: 24038859
Hello aando,

did you check the server security logs?

Regards,

suppsaws
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 400 total points
ID: 24038896
It sounds like some service or schedule task is set to use the old credentials - check.
0
 

Author Comment

by:aando
ID: 24039273
1. I cleared the security log and then immediately hit refresh. Two seperate accounts had already tried to login and fail over 100 times.

2. How do I check for services that may be using a old password?

3. Also, another strange thing is that the two accounts that keep doing this are logging onto two Vostro machines that we just formatted and reinstalled. They had Vista, we formatted and put XP Pro on them.
0
The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

 
LVL 70

Expert Comment

by:KCTS
ID: 24039287
use this script - I can't remember where I got if from - but it works

strComputer = ""
Set objWMIService = GetObject  ("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServices = objWMIService.ExecQuery ("Select * From Win32_Service")

For Each objService in colServices
    Wscript.Echo objService.Name, objService.StartName
Next
0
 

Author Comment

by:aando
ID: 24039312
This is what I am getting every millisecond.

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      675
Date:            4/1/2009
Time:            8:55:04 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SBS2K3
Description:
Pre-authentication failed:
       User Name:      kouimet
       User ID:            MAS\kouimet
       Service Name:      krbtgt/MAS.LOCAL
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:      192.168.26.12


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 

Author Comment

by:aando
ID: 24039336
When I run the script I get an error. I am sure I am doing something wrong. Do I have to change that script in anyway?
0
 

Accepted Solution

by:
aando earned 0 total points
ID: 24039927
http://www.experts-exchange.com/Security/Win_Security/Q_20418480.html#a7549099

This post tells how to fix it. I followed it and the errors stopped.....
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

The problem of the system drive in SBS 2003 getting full continues to be an issue, even though SBS 2008 and SBS 2011 are both in the market place.  There are several solutions to this, including adding additional drive space or using third party uti…
Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
Free Data Recovery software is an advanced solution from Kernel Tools to recover data and files such as documents, emails, database, media and pictures, etc. It supports recovery from physical & logical drive after a hard disk crash, accidental/inte…
From store locators to asset tracking and route optimization, learn how leading companies are using Google Maps APIs throughout the customer journey to increase checkout conversions, boost user engagement, and optimize order fulfillment. Powered …

584 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question