[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Why are my AD users are getting locked out of accounts randomly?

Posted on 2015-01-27
8
Medium Priority
?
186 Views
Last Modified: 2015-01-30
I have a AD network at functional level 2008 and (2) DC's currently running Windows Server 2012 R2.  Prior to promoting those servers, my users were getting randomly locked out of AD, so I made the transition to the new domain controllers.  I have not raised the function level as of yet to 2012.  I did implement many of my users with new email hosting (some exchange and some POP/IMAP), it seems to have started around the same time.

My hosted exchange is not integrated into my AD.
0
Comment
Question by:Joe Spradlin
  • 4
  • 3
8 Comments
 
LVL 35

Expert Comment

by:Paul MacDonald
ID: 40572810
I've seen script kiddies "hack" servers, sites, and domains using software that tries to guess passwords for common user names.  Consequently, if you have a user named "paul", and I try to log in as paul, and I fail enough times, I'm going to lock his account.

Another possibility is if a user has changed their password, but not updated any devices that use the old password, this can lead to lock-outs too.  So if I have a phone or tablet that pulls e-mail for me, and it's using an old password, it can lock me out as well.
0
 
LVL 5

Expert Comment

by:R. Toby Richards
ID: 40572885
His Exchange is on a different domain.
0
 
LVL 1

Author Comment

by:Joe Spradlin
ID: 40572888
You are correct Mr. Richards.  It is hosted.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 5

Accepted Solution

by:
R. Toby Richards earned 2000 total points
ID: 40572899
The only suggestion I have is to dig into the security logs on the DC, and see when, and from what devices users are being locked out.
0
 
LVL 1

Author Comment

by:Joe Spradlin
ID: 40572906
Got ya...I will try that.
0
 
LVL 5

Expert Comment

by:R. Toby Richards
ID: 40572982
If you have a log retention product, then that will make the task easier. I use the free version of Splunk, which is pretty slick. While extremely outdated, I use the last version of Splunk 3.x because as of 4.0 you have to pay to get the feature that can e-mail you if certain search criteria can be met. For example, you could receive an e-mail every time a user gets locked out. The older releases of Splunk are here:

http://www.splunk.com/page/previous_releases
0
 
LVL 5

Expert Comment

by:R. Toby Richards
ID: 40572989
Oh, and the Splunk e-mail will attach the associated log in CSV format so that you don't have to go find it on your own.
0
 
LVL 1

Author Comment

by:Joe Spradlin
ID: 40580419
Ok, so what I found out was happening is an application we have that authenticates using AD users was down and the users were logging in several times trying to get into the app.  I have since fixed the issue and now don't seem to have the problem at this time.  Thanks for all the insightful comments.
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
The reason that corporations and businesses use Windows servers is because it supports custom modifications to adapt to the business and what it needs. Most individual users won’t need such powerful options. Here I’ll explain how you can enable Wind…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
Suggested Courses

608 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question