administrator account locked

[Ola]

My domain administrator account locks itself all the time,
but the account works ok, you don't even know the account
is locked, untill you open the account in ADUC.

If i remove the "locked" state, it stays open for a few
minutes, then gets back to "locked".

Anyone seen this problem before?

 

[Matjaz Ladava [MVP]]

Turn on Audinting on your DC's and observe security log. Also read Account
Lockout bible located at
http://www.microsoft.com/technet/tr...ndowsserver2003/maintain/operate/BPACTLCK.asp
on how to troubleshoot account lockout.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[chris]

this happened to me before, same problem.

basically what happened was that a service that used the administrator
account was trying to log on with the OLD administrator password and
failing, therefore locking out the adminstrator account. (even though you
can still log on to the adminstrator account it shows up as locked out in
AD.)

So hunt for any services that might be failing a logon, such as Backup Exec
or some other service that might be logging on with the Adminstrator
account.

hope that helps.

chris
(e-mail address removed)