Solved

Domain account lockout

Posted on 2016-09-16
2
29 Views
Last Modified: 2016-09-22
Occasionally, a single domain user account will lock out. The user is not logged in anywhere else as far as I can tell. I can unlock the account in ADUC, but the account will quickly relock itself as if a bad password were being tried multiple times. In order to resolve this, I have been restarting the Microsoft Exchange Active Directory Topology service on the domain controller. This prevents the continued lockout issue for this one user. Is there anything I should be looking at on this account specifically to prevent this from happening in the future? I've already had the user reset his domain password, and I don't suspect that his account is being brute-forced. Is there any explanation as to why restarting the AD Topology service fixes this issue? Is this a known issue and/or is there a permanent fix for this problem that I can implement on an SBS 2011 Standard server?
0
Comment
Question by:DataDudes
2 Comments
 
LVL 16

Assisted Solution

by:Dirk Mare
Dirk Mare earned 250 total points
Comment Utility
Seeing that you are restarting exchange services to "resolve" the issue, check the user computer for stored credentials and delete all credentials MSEXCHANGE. .

DirkMare
0
 
LVL 4

Accepted Solution

by:
Felicia King earned 250 total points
Comment Utility
I would enable Netlogon debug logging and then look through the logs for 6A events which are bad password. Looking at that event as well as surrounding events will tell you exactly what is causing the account lockout.
http://www.eventid.net/display-eventid-4776-source-Microsoft-Windows-Security-Auditing-eventno-10736-phase-1.htm

https://support.microsoft.com/en-us/kb/109626
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now