Solved

Locking out a user in windows how to find,

Posted on 2010-09-24
7
791 Views
Last Modified: 2013-12-24
An application is locking out a user like almost each and every day from a commputer, we think that probably an application is trying to login with a user and a wrong password and after 5 times policy in active directory is locking out the user from the computer. I am saying with a wrong password it is trying to login because this started happening after a password reset of a user. Is there a way to track down which application is causing this and how can we find that application and prevent this from happening... look to hear from you asap thank you very much
0
Comment
Question by:fatihdi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33751590
Try to use LockoutStatus and eventcombMT from AL Tools from Microsoft. It would help find lockout user account (DC, event logs in central point)

http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 33752556
Should be some failed logon attempts in the security event logs. I believe these will give the computer and possibly the application that's got you bound up.

Also on the client's computer, maybe you have a saved password in "managed passwords". Go to the client's control pannel>>Users>>advanced>>managed passwords and remove those.
0
 

Author Comment

by:fatihdi
ID: 33752915
@chiefIT , there is no Users in control panel in windows 2000's control panel. where should i look for managed passwords? for your first paraghraph in your comment i did not get what am i supposed to as well? how can i see security event logs ?
cp.JPG
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:fatihdi
ID: 33753316
@iSiek , Thank you for giving the link but the problem is I am not concerned about which account is locked it is always the same. but the thing is I want to find the application that is locking the account,causing it to be locked out !!
0
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 500 total points
ID: 33756147
Yup, this soft shows you which account is locked out and where it is locked out. Then use eventcombMT to examine event viewer logs and you will see which PC locks out that account.
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 33785758
On a windows 2000 machine, there are no managed passwords... I didn't realize we are looking at a Win2000 client.

0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 33785766
OK, so after a password change, you might be logged on elsewhere "remotely" using the old password. This immediately locks you out. Looks like iSiek has a way to track this down.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Your data is at risk. Probably more today that at any other time in history. There are simply more people with more access to the Web with bad intentions.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question