[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 285
  • Last Modified:

Frequent AD account lockouts Event 4226. Source Workstation is blank.

I had this question after viewing Active Directory User Id frequently locked out.

4776,AUDIT FAILURE,Microsoft-Windows-Security-Auditing,Mon Jul 18 09:14:30 2016,No User,The computer attempted to validate the credentials for an account.    Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0  Logon Account: xxx  Source Workstation:   Error Code: 0xc000006a
0
jae1
Asked:
jae1
1 Solution
 
Ganesamoorthy STech LeadCommented:
0
 
Britt ThompsonSr. Systems EngineerCommented:
If you have an Exchange Server you may have a user with a device constantly checking email with an incorrect username or password. Or, there could be a device on the network (i.e., a copier) using LDAP authentication to copy to file or email with an incorrect password.
0
 
Senior IT System EngineerIT ProfessionalCommented:
Or it could be the iTunes password or any proxy credentials error ?
0
 
jae1Author Commented:
Turned out to be an IP phone, however we were never able to get the source by using the logs.
1
 
jae1Author Commented:
Good info
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now