AD account for user keeps locking out

AD account keeps locking out few times a day.
We don't know which device is causing log outlook.

I have cleared out saved password from server browsers and credential Manager in local machine.

Is there a way to find out which device is causing lock out?
And free apps or power shell command?

itadminhelpAsked: 2017-03-09

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get every solution instantly with Premium. Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 19

systechadminConsultantCommented: 2017-03-09

check the event ID 4740 on Domain controller. you will be able to find out the device from there.

LVL 12

Satish AutiSenior System AdministratorCommented: 2017-03-09

use account lockout status utility to identify on which server it's getting locked.
As you cleared all stored password , see if there is any map drive configure to use old credentials also check if any mobile device is configured with old passwords.

LVL 10

AntzsInfrastructure ServicesCommented: 2017-03-09

Take a look at the below.
https://www.experts-exchange.com/questions/28993475/how-can-I-tell-why-a-user-account-keeps-getting-locked-out.html

LVL 17

Ajit SinghCommented: 2017-03-09

There may be many causes for account locked out, like:

user's account in stored user name and passwords
user's account tied to persistent mapped drive
user's account as a service account
user's account used as an IIS application pool identity
user's account tied to a scheduled task
un-suspending a virtual machine after a user's pw as changed
SMARTPHONE!!!

For more refer KB article: http://technet.microsoft.com/en-us/library/cc773155(WS.10).aspx

What are the common root causes of account lockouts and do I resolve them:
https://www.lepide.com/blog/what-are-the-common-root-causes-of-account-lockouts-and-do-i-resolve-them/

Identify the source of Account Lockouts in Active Directory: https://community.spiceworks.com/how_to/128213-identify-the-source-of-account-lockouts-in-active-directory

Troubleshooting account lockout the Microsoft PSS way:
http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx

Hope this helps!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 46

Shaun VermaakTechnical Specialist/DeveloperCommented: 2017-03-09

Please have a look at my article on how to throubleshoot this
https://www.experts-exchange.com/articles/29305/Active-Directory-Locked-Account-Investigation-Process.html