Solved

My DomAdmin account locks every 3-5 minutes

Posted on 2012-03-14
3
303 Views
Last Modified: 2012-03-15
I can't seem to find out why my Account keeps getting locked.  I know it's because failed password attempts.  I used the LockoutStatus tool and in the ORIG field it says DC1 which is my PDC.   I checked all the services and don't see any that are using this account.  This is a brand new domain built within just the past few weeks, not sure how long this has been going on but it became an issue in the last couple days.

I looked in the event log but I don't really see anything.

How can I find out what is causing this?

--- all servers are 2008r2 with all updates
0
Comment
Question by:MushroomStamp
  • 2
3 Comments
 
LVL 6

Accepted Solution

by:
vmagan earned 500 total points
ID: 37723147
enable login auditing on the server. What version of server?

is this the lockout tool that you used?

Account Lockout and Management Tools
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=18465
0
 

Author Comment

by:MushroomStamp
ID: 37723191
Yes that is the tool I used. Ok I turned on that logging then went into the security logs.  I think I may have found the issue. We added a new Stor server 3 days ago and that seems to be the IP its pointing to. with KRBTGT Pre Auth failures

I will disable this for now and see if it makes a difference... Thanks
0
 
LVL 6

Expert Comment

by:vmagan
ID: 37723266
Yup glad the logging events helped. Keep us posted with results.

Thanks
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now