Announcement

Collapse
No announcement yet.

user account locked out frequently

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • user account locked out frequently

    how i can know why the user account locked out frequently and what locked him
    which application.

  • #2
    Re: user account locked out frequently

    That can be difficult. Make sure failure auditing is turned on for your servers and domain controllers. You then need to comb through the security event logs and look for audit failures for the account in question. Depending on the event type, it will give you the IP or name of the device that is trying to authenticate with that user.

    Some common things that could cause repeated lockouts:
    - Password was changed but the account is being used for a service or scheduled task and that wasn't updated
    - Password was changed and the user has one or more mobile devices that are authenticating with the old password to retrieve email
    - User is under attack
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: user account locked out frequently

      You may also want to look at netwrix account lockout examiner. It will email you the information without having to dig through logs on multiple servers. Saved me on several occasions.

      Comment


      • #4
        Re: user account locked out frequently

        JamieFisher and LSainsbury, please check your PMs.

        Thank you.


        Netwrix Account Lockout Examiner. Not a bad looking tool and at a really good price.
        Thanks Jamie. Click image for larger version

Name:	2thumbs.gif
Views:	5
Size:	320 Bytes
ID:	466937
        Last edited by biggles77; 19th December 2014, 07:07.
        1 1 was a racehorse.
        2 2 was 1 2.
        1 1 1 1 race 1 day,
        2 2 1 1 2

        Comment


        • #5
          Re: user account locked out frequently

          what about accountlockout status tool is it good?

          Comment


          • #6
            Re: user account locked out frequently

            It is quite basic in that it won't tell you why an account has been locked out. What it will tell you is which domain controller(s) have locked out the account.
            A recent poll suggests that 6 out of 7 dwarfs are not happy

            Comment


            • #7
              Re: user account locked out frequently

              Hi ,
              I can to recommend you to try Microsoft Lockout tool that will allow you to get small information, if do you have only one DC it's not relevant for you .
              Please check Event logs to understand the user's status . ( review 2-3 day ago ) - don't forget to make filter its might facilitate to you
              in addition please check the user does not locked via Phone , IPAD ,
              Last edited by Meirp; 11th January 2015, 09:04.

              Comment


              • #8
                Re: user account locked out frequently

                I believe Meirp is referring to this set of tools:
                http://www.microsoft.com/en-us/downl....aspx?id=18465
                Regards,
                Jeremy

                Network Consultant/Engineer
                Baltimore - Washington area and beyond
                www.gma-cpa.com

                Comment


                • #9
                  Re: user account locked out frequently

                  Yeah "ronaldo99 " you are right

                  Comment

                  Working...
                  X