Account is locked out from access

"The reference account is currently locked out and may not be logged into". Looking into all the security policies we have none that would affect this or lock the user account out for "x" time.

I have rebooted the server that this user logs onto and also looking into the event view I see under the security tab I see a series of event ID 4625:

Security ID:  NULL SID
cmdolcetAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
Are you seeing an ip-address in the event logs ? This may point to the root cause.
0
Scott TownsendIT DirectorCommented:
You can download the Account Lockout Tools for more Troubleshooting.
https://www.microsoft.com/en-us/download/details.aspx?id=18465

Not sure how many DCs you have in your AD, though this will help you determine which DC was the one that caused the lockout and which Event-log to interrogate. If you don't get the Source DC that the lockout was initiated from the other DCs will just make you run in circles.

The Source Server as yo_bee mentioned should have an IP Address associated with the Lockout event and you should look to see who at that IP is causing the Lockout. Typically its an Expired password, a user changed the Password on their PC but not on their Phone or other device and its causing the lockout.
0
Shaun VermaakTechnical Specialist/DeveloperCommented:
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Naveen SharmaCommented:
May happens due to bad password attempt.

Have you change your password recently?

How to Detect Source of Account Lockouts:
https://www.lepide.com/how-to/identify-the-source-of-account-lockouts-in-active-directory.html
0
cmdolcetAuthor Commented:
Update, I am able to log into the account all day long, I noticed under his account name in the AD there is a place where you can check a checkbox to unlock the account.

The only thing I can see being an issue is a certificate prompt.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cmdolcetAuthor Commented:
Update, I am able to log into the account all day long, I noticed under his account name in the AD there is a place where you can check a checkbox to unlock the account.

The only thing I can see being an issue is a certificate prompt.

This was the correct solution, how can I close out the question?
0
Naveen SharmaCommented:
Please select your answer as a "best answer" If you want you can select rest as assistance solution and close the thread.
0
Naveen SharmaCommented:
All comments are helpful to troubleshoot the issue.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.