Looking for solution for vpxd.exe locking out domain account

The admin account locks out every 30 minutes

The admin in question changed his password when he came back from holidays and in his own words he had vCenter server still open from before he went on holidays.

I asked him had he used it to install any third party\VMware plugins in vCenter. He said this was not the case.

I dont have a remote session with customer so going by their description, financial house so its pretty shut down etc

Confirmed that vCenter Server service hasn't been restarted since this occured.

Would appreciate any advice\workaround concerning this
LVL 1
Indie101Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
What is the account used for the vCenter Server service ?

have you used the Admin Account lockout tools, to troubleshoot further

https://www.microsoft.com/en-us/download/details.aspx?id=18465
Indie101Author Commented:
Thanks Andrew, i will confirm tomorrow which account is used for the vCenter Server service?

He has given information of account lockout and logon type interactive with time stamp etc. he supplied me with a screenshot which he said their windows team had worked on

Anything outside of the Admin Account Lockout that could cause this to happen?

cheers
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
check service accounts for his username
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

LEARN MORE
Indie101Author Commented:
Thanks he said he had checked service accounts with his own domain account

Also he confirmed he had checked scheduled tasks , any services with his credentials and mapped drives with his credentials with nothing showing up
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
vpxd.exe is running as his account, so must be in use.

and if he changed his password, different to what is stored in vpxd.exe, that is what is locking his account.

see this

Active Directory account locks out due to repeated failed login attempts from VMware vCenter Server (2001703)

https://communities.vmware.com/thread/308862?start=0&tstart=0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Indie101Author Commented:
Thanks Andrew I had tried that kb article on Friday with the user

User didn’t reset the Administrator password in VMware vRealize Operations Manager appliance as he wanted to confirm that this was in fact where the issue was occurring.

User powered down the appliance to confirm – however when it was powered down the account still locked out.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.