Repeated domain account lock out

Hello,

I work with desktop support for a rather large organization.  I repeatedly have users experiencing account lockouts.  We have turned off all smart devices so that the customer is only using his company issued laptop.  I've cleared all browser cache and cleared windows vault credential manager.  Lockouts continue to occur.  

I've been working with our server team on the issue.  All that they seem to be able to tell me is that the device is coming from the external portal.  From what i'm told this means its not happening while he is connected to our internal network, thus it could be a smart device or his laptop while remote.  Because it is from an external portal they have been unable to provide MAC address or device name that is causing the lockouts.

I'm looking for some advise or perhaps a tool or utility I can use from the client side to try and determine what is causing the lockouts.  Any advice or suggestions would be greatly appreciated.

other notes:

- Customers laptop has been replaced
- Server team can only tell me when they see bad password attempts against the external portal
tvh231Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
Can you ask the affected user if he/she has been using his/her computer/laptop at home?
Also, check if he/has log on using smartphone or black berry before he/she might have saved her credential on the device? Read the blog below, it might assist.

http://social.technet.microsoft.com/Forums/windowsserver/en-US/3ad0a771-6267-4ea4-8736-a81870e6b53f/why-would-a-domain-controller-be-the-source-of-an-account-lockout

Download Account Lockout Status from the link below and run it against the account in question it will give you the all the location where the account is currently logged on

http://www.microsoft.com/en-us/download/details.aspx?id=15201

Regards
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tvh231Author Commented:
thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.