Announcement

Collapse
No announcement yet.

Account Lockouts

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Account Lockouts

    I have a serious issue with account lockouts, mainly service accounts or admin accounts. My guess is they are running somewhere and keep locking out. Is it possible to get an email everytime an account locks out in my domain? Does anyone have a application suggestion for this type of alert?

    Thanks.

  • #2
    Re: Account Lockouts

    If you are using Server 2008 DCs you can attach an action to an event and use this to send an email. Remember you will need to do this on all DCs as you do not know which one is generating the lockout.

    You should also investigate the "Account Lockout Toolkit" from MS which will allow you to investigate the sequence of lockouts:
    http://www.microsoft.com/en-us/downl....aspx?id=18465
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Account Lockouts

      I have some DC's that are still 2003. How do you add an action to an event and use this to send an email? Can you provide a technet link?

      Also I am not seeing much on how to use this ALTool.exe file?

      Comment


      • #4
        Re: Account Lockouts

        Actions on events: http://blogs.technet.com/b/yuridioge...nt-viewer.aspx
        (sorry, but there is no 2003 equivalent AFAIK)

        There is some help on the ALTools:
        http://technet.microsoft.com/en-us/l...(v=ws.10).aspx
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Account Lockouts

          Can we please stick to one thread, one problem. I have split off the Citrix related posts to a new thread to avoid confusion: http://forums.petri.com/showthread.php?t=62313
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment

          Working...
          X