Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 984
  • Last Modified:

Account Frequently Being Locked Out of Active Directory

We have a 2012 terminal server that about 30 users access daily. One user is having his AD account locked out multiple times a day.

We've checked the event viewer and security logs, and absolutely related to the lockout appears.

Any help would be greatly appreciated!
0
andrew_transparent
Asked:
andrew_transparent
2 Solutions
 
Sarang TinguriaSr EngineerCommented:
any bad password attempt check Event ID: 4776 and its originating workstation
0
 
JAN PAKULACommented:
0
 
JaihuntCommented:
Hi

Use eventcombmt to search the lockout. In the text column give the user name and select your PDC server. check the server event id is 4740,4771,4772,4773,4776

http://support.microsoft.com/kb/824209

http://support.microsoft.com/kb/947226

http://blogs.technet.com/b/bulentozkir/archive/2009/12/28/active-directory-de-kullan-c-hesaplar-kilitlendi-inde-lockout-bunun-sebebini-bulmak-i-in.aspx

Thanks
Jai
0
 
andrew_transparentAuthor Commented:
Thanks guys, very helpful, problem solved!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now