Active directory lockout

I have a user whose account, is locking out automatically after one logon. It seems to be tied into exchange, as her outlook prompts her for a pw immediately after log on. She enters the pw and it locks her out, she is entering the pw we set but it locks her out anyway. We are positive she has not logged onto another computer. Any help is welcome thanks.
LVL 1
yakselrudAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
JunglegunConnect With a Mentor Commented:
She has an old password saved.
 Got to:Control panel > user accounts>advanced > manage passwords and remove stored passwords.
0
 
panky23Commented:
Also, please check the DC event log to check/confimr which workstation is locking up that user account. Then you can verifu is user has a  saved password or scheduled task or service running with her old account or any other app which is locking user's account.
0
 
Johneil1Commented:
Is she using her username and pass to log on as a service anywhere?
0
Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

 
efg-uaeCommented:
Hi
 
Conflicker Virus also try to access the active directory. Please login to domain controller and see the event log and check that from which ip failed login attempts are being made so that you can identify it.
Regards,
Malik Asif
0
 
andrewallenCommented:
You should investigate exactly what is locking out the accounts:

Implementing and Troubleshooting Account Lockout
http://www.windowsecurity.com/articles/Implementing-Troubleshooting-Account-Lockout.html 

Account Lockout and Management Tools
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

If you have some budget, you might want to consider purchasing Account Lockout Examiner to do the hard work for you:

http://www.netwrix.com/account_lockout_examiner.html

Something to else be aware of... some symtoms of malware infection (including Conficker) include random / constant account lockouts across the domain. Ensure your PCs are running current / up to date antivirus / antimalware software.
0
 
yakselrudAuthor Commented:
removing the pw from users account worked.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.