Solved

Account Frequently Being Locked Out of Active Directory

Posted on 2013-05-13
4
972 Views
Last Modified: 2013-05-20
We have a 2012 terminal server that about 30 users access daily. One user is having his AD account locked out multiple times a day.

We've checked the event viewer and security logs, and absolutely related to the lockout appears.

Any help would be greatly appreciated!
0
Comment
Question by:andrew_transparent
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 39163095
any bad password attempt check Event ID: 4776 and its originating workstation
0
 
LVL 14

Assisted Solution

by:JAN PAKULA
JAN PAKULA earned 250 total points
ID: 39163134
0
 
LVL 13

Accepted Solution

by:
Jaihunt earned 250 total points
ID: 39164214
Hi

Use eventcombmt to search the lockout. In the text column give the user name and select your PDC server. check the server event id is 4740,4771,4772,4773,4776

http://support.microsoft.com/kb/824209

http://support.microsoft.com/kb/947226

http://blogs.technet.com/b/bulentozkir/archive/2009/12/28/active-directory-de-kullan-c-hesaplar-kilitlendi-inde-lockout-bunun-sebebini-bulmak-i-in.aspx

Thanks
Jai
0
 
LVL 1

Author Comment

by:andrew_transparent
ID: 39168850
Thanks guys, very helpful, problem solved!
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question