Solved

How to unlock an Account locking out immediately after I unlock it!!

Posted on 2009-04-01
7
326 Views
Last Modified: 2012-05-06
I have a user that it appears put the wrong password in. She said she didn't. However, it keeps saying account is locked out. I go into the server and uncheck the lockout button, hit apply and ok. Then if I immediatly go back into the profile it is locked out again whether I tried to login as her or not.
0
Comment
Question by:aando
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 21

Assisted Solution

by:suppsaws
suppsaws earned 50 total points
ID: 24038859
Hello aando,

did you check the server security logs?

Regards,

suppsaws
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 100 total points
ID: 24038896
It sounds like some service or schedule task is set to use the old credentials - check.
0
 

Author Comment

by:aando
ID: 24039273
1. I cleared the security log and then immediately hit refresh. Two seperate accounts had already tried to login and fail over 100 times.

2. How do I check for services that may be using a old password?

3. Also, another strange thing is that the two accounts that keep doing this are logging onto two Vostro machines that we just formatted and reinstalled. They had Vista, we formatted and put XP Pro on them.
0
Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

 
LVL 70

Expert Comment

by:KCTS
ID: 24039287
use this script - I can't remember where I got if from - but it works

strComputer = ""
Set objWMIService = GetObject  ("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServices = objWMIService.ExecQuery ("Select * From Win32_Service")

For Each objService in colServices
    Wscript.Echo objService.Name, objService.StartName
Next
0
 

Author Comment

by:aando
ID: 24039312
This is what I am getting every millisecond.

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      675
Date:            4/1/2009
Time:            8:55:04 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SBS2K3
Description:
Pre-authentication failed:
       User Name:      kouimet
       User ID:            MAS\kouimet
       Service Name:      krbtgt/MAS.LOCAL
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:      192.168.26.12


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 

Author Comment

by:aando
ID: 24039336
When I run the script I get an error. I am sure I am doing something wrong. Do I have to change that script in anyway?
0
 

Accepted Solution

by:
aando earned 0 total points
ID: 24039927
http://www.experts-exchange.com/Security/Win_Security/Q_20418480.html#a7549099

This post tells how to fix it. I followed it and the errors stopped.....
0

Featured Post

Raise the IQ of Your IT Alerts

From IT major incidents to manufacturing line slowdowns, every business process generates insights that need to reach the people required to take action. You need a platform that integrates with your business tools to create fully enabled DevOps toolchains.

You need xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A lot of problems and solutions are available on the net for the error message "Source server does not meet minimum requirements for migration" while performing a migration from Small Business Server 2003 to SBS 2008. This error pops up just before …
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question