Solved

Active directory lockout

Posted on 2009-05-04
7
529 Views
Last Modified: 2013-12-04
I have a user whose account, is locking out automatically after one logon. It seems to be tied into exchange, as her outlook prompts her for a pw immediately after log on. She enters the pw and it locks her out, she is entering the pw we set but it locks her out anyway. We are positive she has not logged onto another computer. Any help is welcome thanks.
0
Comment
Question by:yakselrud
7 Comments
 
LVL 4

Accepted Solution

by:
Junglegun earned 500 total points
ID: 24297789
She has an old password saved.
 Got to:Control panel > user accounts>advanced > manage passwords and remove stored passwords.
0
 

Expert Comment

by:panky23
ID: 24360336
Also, please check the DC event log to check/confimr which workstation is locking up that user account. Then you can verifu is user has a  saved password or scheduled task or service running with her old account or any other app which is locking user's account.
0
 
LVL 3

Expert Comment

by:Johneil1
ID: 24399008
Is she using her username and pass to log on as a service anywhere?
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 7

Expert Comment

by:efg-uae
ID: 24460724
Hi
 
Conflicker Virus also try to access the active directory. Please login to domain controller and see the event log and check that from which ip failed login attempts are being made so that you can identify it.
Regards,
Malik Asif
0
 
LVL 4

Expert Comment

by:andrewallen
ID: 25192856
You should investigate exactly what is locking out the accounts:

Implementing and Troubleshooting Account Lockout
http://www.windowsecurity.com/articles/Implementing-Troubleshooting-Account-Lockout.html  

Account Lockout and Management Tools
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

If you have some budget, you might want to consider purchasing Account Lockout Examiner to do the hard work for you:

http://www.netwrix.com/account_lockout_examiner.html

Something to else be aware of... some symtoms of malware infection (including Conficker) include random / constant account lockouts across the domain. Ensure your PCs are running current / up to date antivirus / antimalware software.
0
 
LVL 1

Author Comment

by:yakselrud
ID: 25720125
removing the pw from users account worked.
0

Featured Post

Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

Join & Write a Comment

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now