Domain Account Lockout Frequently.

Posted on 2010-04-07
Medium Priority
Last Modified: 2012-06-21
We are facing issue in domain account which is getting frequently locked out. This issue is happening once we restart the system. we tried clering cache passwords , deleting browsing history.... We have win 2003 server DC and XP as client OS with sp3 installed on XP.
Question by:YogeshSLK
LVL 16

Expert Comment

ID: 30004141

Before I make any assumptions as I dont have eyes on the environment please run the AD lockout tools


And verify the source of the lockout or directly from the event viewer on the relevant DC, Malware such as conflicker are known to do this or it could be a service etc, I would advise making sure AV is up to date and finding the source computer and running a scan.

Expert Comment

ID: 30004396

we used to face such problem!
one of the main issues are the clients, did they map the shared folders and set it to be connecting at login?

when I removed that and I made a program that map the shared folders for them only when they need everything worked OK


Expert Comment

ID: 30005771

Accepted Solution

YogeshSLK earned 0 total points
ID: 30690636
Hello All,

This issue got resolved after i analysed this in my primary domain controller Event Viewer with event id 644. There i found the username which was getting frequently locked out and their was the computer name as well where the account was getting locked out. I shutdown that machine as it was locked by that user their and he was trying in other machine with the new password. This helped me to resolve the issue.

Author Comment

ID: 30690886

Featured Post

[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Learn about cloud computing and its benefits for small business owners.
There may be issues when you are trying to access Outlook or send & receive emails or due to Outlook crash which leads to corrupt or damaged PST file. To eliminate the corruption from your PST file, you need to repair the corrupt Outlook PST file. U…
Get the source code for a fully functional Access application shell with several popular security features that Access VBA application developers desire, but find difficult or impossible to figure out how to code. You get the source code for managi…

594 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question