?
Solved

How to find why domain user's account keeps locking out?

Posted on 2014-09-04
2
Medium Priority
?
371 Views
Last Modified: 2014-09-04
I have a DBA who's domain account keeps locking out.  What is the quickest way to find this culprit?  I have had them check all of their automated task scheduled jobs to make sure they are using the correct credentials but it is still locking out.  Is this information logged in event viewer on the DC to find the culprit?  I don't have access to the DC but I can have someone check this out.  Thanks for your help, this user is driving me nuts...
0
Comment
Question by:gloyola1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Accepted Solution

by:
Delete earned 2000 total points
ID: 40304048
Download the Account Lockout Tool from Microsoft and run it against your Domain Controllers.  You can download the tool here: http://www.microsoft.com/en-us/download/details.aspx?id=18465 

The tool will let you know what Domain Controller the account locked out against.  Once you know the Domain Controller look in the Security log of that Domain Controller for the lock out event which I believe is EventID 644 (or you can simply search for the username of the account being locked out).  

Once you find the event, it will tell you what system is locking out the account.  Next you will need to go to that system and investigate logs, processes, applications, scheduled tasks, etc... to find where the bad password is stored.
0
 

Author Comment

by:gloyola1
ID: 40304376
Great tool.  Thanks
0

Featured Post

Enroll in August's Course of the Month

August's CompTIA IT Fundamentals course includes 19 hours of basic computer principle modules and prepares you for the certification exam. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question