Solved

How to find why domain user's account keeps locking out?

Posted on 2014-09-04
2
370 Views
Last Modified: 2014-09-04
I have a DBA who's domain account keeps locking out.  What is the quickest way to find this culprit?  I have had them check all of their automated task scheduled jobs to make sure they are using the correct credentials but it is still locking out.  Is this information logged in event viewer on the DC to find the culprit?  I don't have access to the DC but I can have someone check this out.  Thanks for your help, this user is driving me nuts...
0
Comment
Question by:gloyola1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Accepted Solution

by:
Delete earned 500 total points
ID: 40304048
Download the Account Lockout Tool from Microsoft and run it against your Domain Controllers.  You can download the tool here: http://www.microsoft.com/en-us/download/details.aspx?id=18465 

The tool will let you know what Domain Controller the account locked out against.  Once you know the Domain Controller look in the Security log of that Domain Controller for the lock out event which I believe is EventID 644 (or you can simply search for the username of the account being locked out).  

Once you find the event, it will tell you what system is locking out the account.  Next you will need to go to that system and investigate logs, processes, applications, scheduled tasks, etc... to find where the bad password is stored.
0
 

Author Comment

by:gloyola1
ID: 40304376
Great tool.  Thanks
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question