asked on

Active directory lockout

I have a user whose account, is locking out automatically after one logon. It seems to be tied into exchange, as her outlook prompts her for a pw immediately after log on. She enters the pw and it locks her out, she is entering the pw we set but it locks her out anyway. We are positive she has not logged onto another computer. Any help is welcome thanks.

ASKER CERTIFIED SOLUTION

Junglegun

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

panky23

Also, please check the DC event log to check/confimr which workstation is locking up that user account. Then you can verifu is user has a saved password or scheduled task or service running with her old account or any other app which is locking user's account.

Johneil1

Is she using her username and pass to log on as a service anywhere?

efg-uae

Hi

Conflicker Virus also try to access the active directory. Please login to domain controller and see the event log and check that from which ip failed login attempts are being made so that you can identify it.
Regards,
Malik Asif

andrewallen

You should investigate exactly what is locking out the accounts:

Implementing and Troubleshooting Account Lockout
http://www.windowsecurity.com/articles/Implementing-Troubleshooting-Account-Lockout.html

Account Lockout and Management Tools
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

If you have some budget, you might want to consider purchasing Account Lockout Examiner to do the hard work for you:

http://www.netwrix.com/account_lockout_examiner.html

Something to else be aware of... some symtoms of malware infection (including Conficker) include random / constant account lockouts across the domain. Ensure your PCs are running current / up to date antivirus / antimalware software.

yakselrud

ASKER

removing the pw from users account worked.