Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 101
  • Last Modified:

Continuous domain account lock out.

I've dealt with these type of issues many times, and usually it comes down to where a user did not change their domain password on a mobile device after changing their password on their computer, which cause the continuous lock out.

This is my first experience with a user having continuous domain lock out issue. See log below. I am trying to trace the source. Per user, she does not have a mobile device or have another session on another computer. Is lsass.exe a suspicious .exe? How can I trace the source to find out where the lock out is occuring? She did mention that the auto-discover option does pop up every now and then.

2016-11-09_12-18-26.png
0
joukiejouk
Asked:
joukiejouk
2 Solutions
 
Mohammed KhawajaManager - Infrastructure: Information TechnologyCommented:
Try the following:
- Ensure the account is unlocked
- Have the user login
- Delete mapped drives
- Delete saved credentials in Control Panel
- Wait 30 minutes and see if problem happens
- If account doesn't lock they have the user try one application at a time to find out the offending application
1
 
Senior IT System EngineerIT ProfessionalCommented:
Yes, usually it is saved proxy credentials or some 3rd party application which still using or saving the old credentials.
Typically Apple iTunes.
0
 
joukiejoukAuthor Commented:
It was discovered that the Mimecast auhtication add-on in Outlook was causing this issue.
1

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now