Solved

Windows login account tracking tool needed

Posted on 2014-01-10
4
243 Views
Last Modified: 2014-01-16
I need to find a free tool or instructions from MS as to how to track down a username trying to login with invalid credentials which continuously locks out said account.

We have too many variables, scheduled tasks, mobile devices, etc to track this down manually!

Thanks,
Shane Draper
0
Comment
Question by:ComputerPros-ga
  • 2
4 Comments
 
LVL 11

Expert Comment

by:Miftaul
ID: 39770950
ManageEngine has a good tool "EventLog Analyzer" - Link which you can use to check event log to find failed logon attempts.
0
 
LVL 2

Accepted Solution

by:
Parrish Chamberlain earned 500 total points
ID: 39770954
Account lockouts with microsoft AD can be manged using the following 2 tools

Account lockout status available for download at the below link

http://www.microsoft.com/en-au/download/details.aspx?id=15201

Also install the EventCombMT tool from microsoft to trace
see here how to use and download

http://support.microsoft.com/kb/824209

Microsoft Technet has a good user and instruction to assit with lockouts

http://technet.microsoft.com/en-us/library/cc738772(v=ws.10).aspx

from experience I have found it is usually an ISA server or Gateway and old passwords on Mobile devices for email accss or MAC computers which store credentials in a key chain

If you have an ISA server try this link to get a report

http://blogs.dirteam.com/blogs/paulbergson/archive/2012/04/23/user-account-lockout-troubleshooting.aspx


--------------------------------------------------------------------------------
0
 

Author Closing Comment

by:ComputerPros-ga
ID: 39783498
Using these tools we found the issue.
0
 
LVL 2

Expert Comment

by:Parrish Chamberlain
ID: 39784985
cheers
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Resolve DNS query failed errors for Exchange
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question