Posted on 2009-04-23
Last Modified: 2012-05-06
I have a user that every time he logs in he is locked out. I assume someone is trying to log in with his username and password and is getting it locked out, how would I go about tracking this or where are the log files if any?

Thanks in advance.
Question by:Newbie0000
    LVL 11

    Accepted Solution

    The Security Event log normally logs attempted logins
    LVL 1

    Expert Comment

    by:Aztec Computers
    Has this user stored / remebered a previous password in their windows account? Often people check the box to remember a network password, then forget they have stored it, change their password, and then the network sends the old password over the network, generating an account lockout due to number of 'incorrect' password attempts.

    Expert Comment

    Look for applications that store passwords and authenticate against the domain.  I had a user that had a corrupted profile and his outlook was trying to authenticate using his old password and ended up killing his profile and recreating it on the workstation and the issue went away.  Figured out it was his own system causing the issue using bmatumburas approach of looking at failed logon attempts on the domains controller security event log.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    When the confidentiality and security of your data is a must, trust the highly encrypted cloud fax portfolio used by 12 million businesses worldwide, including nearly half of the Fortune 500.
    This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now