We help IT Professionals succeed at work.

Troubleshooting AD account lockouts

Troubleshooting an AD account that keeps locking out

Have installed lockout tool (just cant see it after installation) can you install it on a client pc and point to the Domain controller?

What logs do I need to look at on domain controller to see account status etc?

Watch Question

Matt MinorTechnical Systems Analyst

AlexA lack of information provides a lack of a decent solution.

Use EventCombMT and then use the build in search for account lockouts. Easiest place to start.


Get help from this article to troubleshoot Account Lockout in Active Directory.

Make the search for Event ID: 4740.

Also, do a log search for Event ID 4625 using EventTracker.

To effectively troubleshoot account lockout issue, we need to enable auditing at the domain level for the following events:

Account Logon Events – Failure

Account Management – Success

Logon Events – Failure

Get help from this article to audit the successful or failed logon and logoff attempts in the network using the audit policies.
Matt MinorTechnical Systems Analyst

The article link I posted which was authored by an EE member has the same and better content.

what was the resolution to your issue?