ACTIVE DIRECTORY

One user is getting constantly locked out

where should I check the source or server the user is getting locked out
pramod1Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Iamthecreator OMCommented:
You can use Microsoft Lockout status tool for getting the information when the User account got locked (Date and time).
Apart from this you will also get information like on which DC the account got locked , How many bad passwords, AD site, Etc.

This is very helpful tool. Using this we can check what is the computer account from which computer account is getting locked

You can download the tool from below link.

http://www.microsoft.com/download/en/details.aspx?id=15201

Troubleshooting Active directory Lockout Issue.

http://msexchangeguru.com/2012/03/08/ad-lockout/
Once you get computer account information on which user account is getting locked then make sure non of the services or scheduled tasks are running on the computer with that user account
additionally refer below thread which discuss the same problem
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/cddbf977-b98f-4783-8226-ebddab54d002/
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/fdac3589-886c-4ba7-a49e-6a5e227679c7
0
pramod1Author Commented:
I downloaded the tool but cant cant see msi file
0
Iamthecreator OMCommented:
I have downloaded and attached the file for you.Change  the extension and execute.Alternatively look in the downloads folder on your computer where your browsers stocks all the downloaded files.
lockoutstatus.pdf
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

pramod1Author Commented:
it gives lot of servers name with not locked(auto unlocked)

what is this meaning
0
Iamthecreator OMCommented:
can  you send me a screenshot?
0
pramod1Author Commented:
kindly let me know
account-locked
0
pramod1Author Commented:
which dc should I refer
0
Iamthecreator OMCommented:
What kind of file is it? Cant open it .
0
Iamthecreator OMCommented:
Check this link out , it has screenshots and explaination.Look for the account with a lot of Bad Password entries to start with.
0
pramod1Author Commented:
open with notepad
0
Iamthecreator OMCommented:
CCIXDC36SAT,SAT-EXCH,Not Locked (Auto Unlocked),4
CCIXDC33SAT,SAT-EXCH,Not Locked (Auto Unlocked),4

These two have the max number of 4 bad password attempts.
0
pramod1Author Commented:
where did u get 4
0
pramod1Author Commented:
ok I got it , but is there any devise which is causing like external phone
0
pramod1Author Commented:
I need to check evnt viewer
0
Iamthecreator OMCommented:
CCIXDC31SAT,SAT-EXCH,Not Locked (Auto Unlocked),2,9/30/2015 10:18:37 AM,9/1/2015 10:29:33 AM,9/30/2015 10:18:34 AM,CCIXDC33SAT
CCIXDC32SAT,SAT-EXCH,Not Locked (Auto Unlocked),0,7/21/2015 3:42:43 AM,9/1/2015 10:29:33 AM,9/30/2015 10:18:34 AM,CCIXDC33SAT
CCIXDC33SAT,SAT-EXCH,Not Locked (Auto Unlocked),4,9/30/2015 10:18:34 AM,9/1/2015 10:29:33 AM,9/30/2015 10:18:34 AM,CCIXDC33SAT
CCIXDC34SAT,SAT-EXCH,Not Locked (Auto Unlocked),0,7/21/2015 3:42:37 AM,9/1/2015 10:29:33 AM,9/30/2015 10:18:34 AM,CCIXDC33SAT


The number after (Auto Unlocked),is the number of bad password attempts
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Iamthecreator OMCommented:
I will be signing off now.Have a great day ahead.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.