How to find the workstation or IP Address from which the account lockout?

Posted on 2009-04-29
Last Modified: 2012-05-06
Please tell me the suggestion that how to find the workstation or IP Address from where the user account lockout.
Because, some of the user account were locked without the user interruption.
Since some other user were trying with the wrong password and locked other user accounts in their workstation.
From finding the workstation we can find the user who lockout the others user account.
Thanking you in advance

Question by:Icontech
    LVL 24

    Assisted Solution

    LVL 13

    Accepted Solution


    you should be able to find this information on your domain controller in the security log.
    But of course there has to be auditing of successful and failed account logon attempts. This should be set in your Default Domain Controllers Policy.

    In the logged event you will see from which station this problem originates.
    Btw I suggest to download ALTools.exe package. It's quite nice package of nice utilities designed for managing locked accounts (Account Lockout Tool) and to give you some usefull and simple-to-read information about the user account.

    In this package you will find a DLL file called acctinfo.dll
    Unpack it somwhere to your server, go to Start -> Run and type "regsvr32 acctinfo.dll" (where acctinfo.dll should represent the actual path to this file).
    Then go to Active Directory Users and Computers, open the properties of any user account and you will find a new tab called Additional info. Here you will see some info like last logon time, password change, etc...very nice.

    Hope this helps

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    At some point in your work you may run into a need to globally assign a specific file type to open using a specific program. I recently was tasked with completing this objective. In my case it was setting the TSV file association to open with Excel.…
    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now