• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 375
  • Last Modified:

Frequent AD account lockouts Event 4226. Source Workstation is blank.

I had this question after viewing Active Directory User Id frequently locked out.

4776,AUDIT FAILURE,Microsoft-Windows-Security-Auditing,Mon Jul 18 09:14:30 2016,No User,The computer attempted to validate the credentials for an account.    Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0  Logon Account: xxx  Source Workstation:   Error Code: 0xc000006a
0
jae1
Asked:
jae1
1 Solution
 
Ganesamoorthy STech LeadCommented:
0
 
Britt ThompsonSr. Systems EngineerCommented:
If you have an Exchange Server you may have a user with a device constantly checking email with an incorrect username or password. Or, there could be a device on the network (i.e., a copier) using LDAP authentication to copy to file or email with an incorrect password.
0
 
Senior IT System EngineerIT ProfessionalCommented:
Or it could be the iTunes password or any proxy credentials error ?
0
 
jae1Author Commented:
Turned out to be an IP phone, however we were never able to get the source by using the logs.
1
 
jae1Author Commented:
Good info
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now