User getting locked out

I got a user whos account getting locked out several times a day.   He saying happens when he trying to put his password into iphone and ipad.  He swears he puts a correct password.

In the event log I see event 675
Pre-authentication failed:
       User Name:      username
       User ID:            domain\rwyman
       Service Name:      krbtgt/domain
       Pre-Authentication Type:      0x2
       Failure Code:      0x12
       Client Address:      10.1.10.10
and the next event 680:
Logon attempt by:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:      username
 Source Workstation:      hislaptop
 Error Code:      0xC0000234

I'm confused why itis coming from his laptop as a source if he is trying from iphone/ipad. Also I see other users have the same events but this one only getting locked out...

Please advice.
LVL 17
Tiras25Asked:
Who is Participating?
 
Randy DownsConnect With a Mentor OWNERCommented:
try this -
Download and install the Account Lockout and Management Tools, this will help you pinpoint the location of the failed auth attempts: http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E 
0
 
Tiras25Author Commented:
Do I install it on the Domain Controller or the user's workstation?
0
 
Randy DownsConnect With a Mentor OWNERCommented:
Looks like you can install it whereever is convenient. I'd install it on your workstation.

•Supported Operating Systems:Windows 2000;Windows NT;Windows Server 2003

Caution: Do not use this tool on servers that host network applications or services. Also, you should not use ALockout.dll on Exchange servers, because it may prevent the Exchange store from starting.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
AmitConnect With a Mentor IT ArchitectCommented:
Account lockout tool is good, but tracing the root cause with till tool is not easy. Better option, is just to append 1 like if username is user change it to user1. That should fix the issue. There will be no impact on user desktop etc.
0
 
every1isevil2Connect With a Mentor Commented:
ipods and ipads if a failed auth happens...it tries 10 times with in seconds.  check audit logs for failed atempts.  
0
 
JavedtariqConnect With a Mentor Commented:
The Best and easy fix for this is reset his local profile on the laptop. or any other accounts he is using on that laptop computer.
Ask him to log back in again and this will create a new local profile. This should resolve the issue for you as this has worked for me previously
0
 
Tiras25Author Commented:
Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.