Link to home
Start Free TrialLog in
Avatar of deklinm
deklinmFlag for United States of America

asked on

AD User Account Repeated Locked Outs

One of my users Active Directory account keeps getting locked out.  Is there a way to see the IP address of the node failing authentications?
ASKER CERTIFIED SOLUTION
Avatar of netcmh
netcmh
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Something else to watch for is user's trying to connect to wireless by specifying their AD credentials, but doing so incorrectly. This results in repeated authentication attempts which will eventually lock out the account, and continue to do so until the bad credentials are removed from the device (iphone, android, etc).
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
There are lots of reason for lockout like; saved password, scheduled task, services or applications may contains saved password, you may ask your user to check and update saved password regularly.  

There lots of earlier discussion here on the similar issue you can check them to get in detailed.

Troubleshooting account lockout the PSS way:
https://blogs.technet.microsoft.com/instan/2009/09/01/troubleshooting-account-lockout-the-pss-way/

Hope this helps!
Ajit Singh has reiterated all preceding experts' opinions and claimed the most points for it.