Account Locked out but Not Logs to Check

[Mint]

When Our Domain Admin Account Changed password , the account is always
locked.I try to get some logs but no useful one.
I have change all the services and schedules 's logon accout.
but not effect.
i also use account lock out mangment tools, but i can only get the lock
out time, no useful logs.
HOW can i do?
can anyone help me ?
Thank you very much.

 

[Jorge de Almeida Pinto [MVP - DS]]

see:
check out netlogon debugging
http://support.microsoft.com/kb/109626/
http://www.eksternkompetanse.no/blog/PermaLink,guid,43f143b3-f389-4946-9bdf-21a1b787f5cb.aspx

check the latter article to see on how to use the netlogon debugging to
trace the source of the problem


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Paul Bergson [MVP-DS]]

Is the account logged into more than one machine or is it running a service
on the same machine? A user could have mapped drives to a resource from one
machine, on a different machine he changes his password and then the first
machine attempts to stay mapped to a drive and the password is no longer
correct and eventually locks the user out. Or after a password is changed a
service is running that attempts to authenticate with an old password.

To help try and track down where the account is getting locked out use
eventcomboMT.exe from the Account Lockout tools found out Microsoft's
website. Use the built in search AccountLockouts and search in the created
text files for the user in question.

http://www.microsoft.com/downloads/...familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e



--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[AlieRedW]

BTW, I would recommend the following product from NetWrix: Account
Lockout Examiner (see www.netwrix.com). We recently deployed it in our
network, and it works rather good - does many things related to account
lockouts
automatically, no need to do them routinely with many tools, as you
described below. Personally for me (I'm network admin), it's a great
aid.

 

[Paul Bergson [MVP-DS]]

There is no need to do anything routinely in what I described.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.