?
Solved

How to unlock an Account locking out immediately after I unlock it!!

Posted on 2009-04-01
7
Medium Priority
?
327 Views
Last Modified: 2012-05-06
I have a user that it appears put the wrong password in. She said she didn't. However, it keeps saying account is locked out. I go into the server and uncheck the lockout button, hit apply and ok. Then if I immediatly go back into the profile it is locked out again whether I tried to login as her or not.
0
Comment
Question by:aando
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 21

Assisted Solution

by:suppsaws
suppsaws earned 200 total points
ID: 24038859
Hello aando,

did you check the server security logs?

Regards,

suppsaws
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 400 total points
ID: 24038896
It sounds like some service or schedule task is set to use the old credentials - check.
0
 

Author Comment

by:aando
ID: 24039273
1. I cleared the security log and then immediately hit refresh. Two seperate accounts had already tried to login and fail over 100 times.

2. How do I check for services that may be using a old password?

3. Also, another strange thing is that the two accounts that keep doing this are logging onto two Vostro machines that we just formatted and reinstalled. They had Vista, we formatted and put XP Pro on them.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 70

Expert Comment

by:KCTS
ID: 24039287
use this script - I can't remember where I got if from - but it works

strComputer = ""
Set objWMIService = GetObject  ("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServices = objWMIService.ExecQuery ("Select * From Win32_Service")

For Each objService in colServices
    Wscript.Echo objService.Name, objService.StartName
Next
0
 

Author Comment

by:aando
ID: 24039312
This is what I am getting every millisecond.

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      675
Date:            4/1/2009
Time:            8:55:04 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SBS2K3
Description:
Pre-authentication failed:
       User Name:      kouimet
       User ID:            MAS\kouimet
       Service Name:      krbtgt/MAS.LOCAL
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:      192.168.26.12


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 

Author Comment

by:aando
ID: 24039336
When I run the script I get an error. I am sure I am doing something wrong. Do I have to change that script in anyway?
0
 

Accepted Solution

by:
aando earned 0 total points
ID: 24039927
http://www.experts-exchange.com/Security/Win_Security/Q_20418480.html#a7549099

This post tells how to fix it. I followed it and the errors stopped.....
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question