Solved

GP Account Lockout, strange behaviour

Posted on 2014-02-06
9
305 Views
Last Modified: 2014-03-08
Hi all
I've enabled, on my domain (win srv 2008), the Account Lockout Policy.
I have a problem with only 1 user (in total they are 80, more or less).
He finds randomly his account locked, but he does not use a wrong password (at least, not 10 times as GP!). It happens 2-3 times every month.

In event viewer I cannot find anything regarding these locks

He uses:
- pc with Windows 7
- mac with parallels for a Windows 7 machine
- iPad
- iPhone

Any ideas?
Thx
0
Comment
Question by:ServiceAdvisory
  • 5
  • 3
9 Comments
 
LVL 9

Expert Comment

by:Alex Green
ID: 39838501
Go here

http://www.microsoft.com/en-gb/download/details.aspx?id=18465

Download the lockout tools, it will scan your domain controllers and you should be able to find where the account is locking out. Go to said computer and you'll probably find something like a scheduled task or the account logged on with an old password.
0
 

Author Comment

by:ServiceAdvisory
ID: 39838528
nice tool, but from there I can see on which DC is locked (when he is): or I am using it in the wrong way?

I read that I should look for an event id 4740, but I cannot find it anywhere.
0
 
LVL 9

Expert Comment

by:Alex Green
ID: 39838532
If you open eventcombMT and then at the top click searches, built in searches, account lock outs :D
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 

Author Comment

by:ServiceAdvisory
ID: 39838546
ok, good
but no results here

Total events searched: 540396
Total matches found: 0
0
 
LVL 9

Expert Comment

by:Alex Green
ID: 39838558
:-(

Not sure then, it could be that he's actually just locking out his account by accident and doesn't want to admit it... :S

The other thing I would check is your current Security log size, if it's not large enough it'll only keep data for the day rather than historical data, you may need to change that so you have the logs to scan in the first place.

Regards

Alex
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39838667
What is your account lockout threshold? Microsoft suggests keeping it at 10.
0
 

Author Comment

by:ServiceAdvisory
ID: 39846620
Yes, the value is 10
Any other idea?
0
 

Accepted Solution

by:
ServiceAdvisory earned 0 total points
ID: 39876333
no solution atm
any idea, or I can close?
0
 

Author Closing Comment

by:ServiceAdvisory
ID: 39914417
no solution provided
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question