Issue with 4 domain admin accounts getting locked out every 2-3 hours

We have 4 domain admin accounts that keep getting locked out every 2-3 hours. Not sure why, but don't laugh, the dcs ar still running server 2003.. I know, UPGRADE but they cant right now.
So any ideas what I can look at to see what is locking out all of the domain admin accounts?
LVL 1
vmichAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

kulboyCommented:
did they change the password?  it might be a service that is configured with that account?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vmichAuthor Commented:
not sure I need to find that out but seems strange that all 4 would change them at the same time..
kulboyCommented:
true, what about a policy change?  forced password changes?
Do you use service accounts for long running services?
Do you have wireless devices authenticating with domain credentials?  (i once had this problem)
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

vmichAuthor Commented:
all very good points and I will check them all and get back to you..
Andy MIT Systems ManagerCommented:
You could also check the security event logs on the server. It should indicate any failed login attempts and give you an idea where the requests are originating from.
Toni UranjekConsultant/TrainerCommented:
Try this tool:

Netwrix Account Lockout Examiner
http://www.netwrix.com/account_lockout_examiner.html
ramakrishnan esystem administratorCommented:
domain admin account have different type:
1.enterprise account
2.schema admin
3.domain admin
4.delegated admin
which account getting locked?
create new account and make that account as admin and test and update status
Will SzymkowskiSenior Solution ArchitectCommented:
Before you can start checking logs or using other software to check where the accounts are locking out from, you need to enable Active Directory Autiding first. This is not enabled by default. Once it is enabled you can then use a product called Active Directory Auditor by Lepide software.

This will give you a great overview and insight based on what are in the logs. It also shows a lot more then just password/account lock outs.

Enable Active Directory Auditing
http://www.wsit.ca/how-tos/active-directory/configure-active-directory-auditing/

Active Directory Auditor by Lepide Software
http://www.lepide.com/lepideauditor/active-directory-auditing.html

Will.
vmichAuthor Commented:
password was changed
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.