AD account for user keeps locking out

itadminhelp
itadminhelp used Ask the Experts™
on
AD account keeps locking out few times a day.
We don't know which device is causing log outlook.

I have cleared out saved password from server browsers and credential Manager in local machine.

Is there a way to find out which device is causing lock out?
And free apps or power shell command?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Gaurav SinghSolutions Architect
Commented:
check the event ID 4740 on Domain controller. you will be able to find out the device from there.
Satish AutiSenior System Administrator
Commented:
use account lockout status utility to identify on which server it's getting locked.
As you cleared all stored password , see if there is any map drive configure to use old credentials also check if any mobile device  is configured with old passwords.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Tech Lead
Commented:
There may be many causes for account locked out, like:

user's account in stored user name and passwords
user's account tied to persistent mapped drive
user's account as a service account
user's account used as an IIS application pool identity
user's account tied to a scheduled task
un-suspending a virtual machine after a user's pw as changed
SMARTPHONE!!!

For more refer KB article: http://technet.microsoft.com/en-us/library/cc773155(WS.10).aspx

What are the common root causes of account lockouts and do I resolve them:
https://www.lepide.com/blog/what-are-the-common-root-causes-of-account-lockouts-and-do-i-resolve-them/

Identify the source of Account Lockouts in Active Directory: https://community.spiceworks.com/how_to/128213-identify-the-source-of-account-lockouts-in-active-directory

Troubleshooting account lockout the Microsoft PSS way:
http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx

Hope this helps!
Shaun VermaakTechnical Specialist
Awarded 2017
Distinguished Expert 2018
Commented:
E ATech Lead

Commented:
No further question from author. Please post back if you have.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial