User getting locked out

Posted on 2011-04-28
Last Modified: 2012-05-11
I got a user whos account getting locked out several times a day.   He saying happens when he trying to put his password into iphone and ipad.  He swears he puts a correct password.

In the event log I see event 675
Pre-authentication failed:
       User Name:      username
       User ID:            domain\rwyman
       Service Name:      krbtgt/domain
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:
and the next event 680:
 Logon account:      username
 Source Workstation:      hislaptop
 Error Code:      0xC0000234

I'm confused why itis coming from his laptop as a source if he is trying from iphone/ipad. Also I see other users have the same events but this one only getting locked out...

Please advice.
Question by:Tiras25
    LVL 29

    Accepted Solution

    try this -
    Download and install the Account Lockout and Management Tools, this will help you pinpoint the location of the failed auth attempts:
    LVL 17

    Author Comment

    Do I install it on the Domain Controller or the user's workstation?
    LVL 29

    Assisted Solution

    by:Randy Downs
    Looks like you can install it whereever is convenient. I'd install it on your workstation.

    •Supported Operating Systems:Windows 2000;Windows NT;Windows Server 2003

    Caution: Do not use this tool on servers that host network applications or services. Also, you should not use ALockout.dll on Exchange servers, because it may prevent the Exchange store from starting.
    LVL 41

    Assisted Solution

    Account lockout tool is good, but tracing the root cause with till tool is not easy. Better option, is just to append 1 like if username is user change it to user1. That should fix the issue. There will be no impact on user desktop etc.
    LVL 4

    Assisted Solution

    ipods and ipads if a failed auth tries 10 times with in seconds.  check audit logs for failed atempts.  
    LVL 3

    Assisted Solution

    The Best and easy fix for this is reset his local profile on the laptop. or any other accounts he is using on that laptop computer.
    Ask him to log back in again and this will create a new local profile. This should resolve the issue for you as this has worked for me previously
    LVL 17

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Suggested Solutions

    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now