• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 289
  • Last Modified:

user being locked out

Hello, I have a 2008 server Domain controller / active directory. I have one user that changed his password this morning but now every few hours his account is getting locked out. can someone please tell me how I can find out which computer or service is causing this....
0
MrMay
Asked:
MrMay
1 Solution
 
rharland2009Commented:
Start with your DC and look at the security logs. Filter on 'Audit Failure'. Start looking for unsuccessful attempts. If he's getting locked out because someone else is hammering the login, some unsuccessful attempts should be showing up.
0
 
AmericomCommented:
If you have more than one DC, you may need to look at them all. But you could also run the %logonserver% command to identify which domain controller the user used and start from that DC's security logs.
0
 
d0ughb0yCommented:
I agree. It's entirely possible that someone else is trying to use his credential.
0
 
Gajendra RathodSr. System AdministratorCommented:
May this will help you, Account lockout
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Tackle projects and never again get stuck behind a technical roadblock.
Join Now