Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Continuous domain account lock out.

Posted on 2016-11-09
3
Medium Priority
?
97 Views
Last Modified: 2016-11-16
I've dealt with these type of issues many times, and usually it comes down to where a user did not change their domain password on a mobile device after changing their password on their computer, which cause the continuous lock out.

This is my first experience with a user having continuous domain lock out issue. See log below. I am trying to trace the source. Per user, she does not have a mobile device or have another session on another computer. Is lsass.exe a suspicious .exe? How can I trace the source to find out where the lock out is occuring? She did mention that the auto-discover option does pop up every now and then.

2016-11-09_12-18-26.png
0
Comment
Question by:joukiejouk
3 Comments
 
LVL 25

Accepted Solution

by:
Mohammed Khawaja earned 1050 total points
ID: 41881277
Try the following:
- Ensure the account is unlocked
- Have the user login
- Delete mapped drives
- Delete saved credentials in Control Panel
- Wait 30 minutes and see if problem happens
- If account doesn't lock they have the user try one application at a time to find out the offending application
1
 
LVL 8

Assisted Solution

by:Senior IT System Engineer
Senior IT System Engineer earned 450 total points
ID: 41881969
Yes, usually it is saved proxy credentials or some 3rd party application which still using or saving the old credentials.
Typically Apple iTunes.
0
 

Author Closing Comment

by:joukiejouk
ID: 41890056
It was discovered that the Mimecast auhtication add-on in Outlook was causing this issue.
1

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question