Problem with user being continually locked out

  • Thread starter Thread starter jean
  • Start date Start date
J

jean

We have a user who is continually locked out every
morning, and during the day after inactivity on the
computer. We have tried, deleting the roaming profile,
local profile, upmapping drives, just about everything
except deleting the user and starting over. Any ideas?
 
Are this account used to operate under some service with a incorrect or old
password can cause this. Or another application or may people use the
account with an old or incorrect password.
 
How do we go about checking something like that, because
we cannot think of anything that would be using his
password
 
Find lockoutstatus.exe from MSFT site and use it to find last password attempt time.. in my organization, there are lots of Randex viruses that attempts to bruteforce attacks on passwords, hence depending on your password policies - accounts will be lockedout and moved on to the next one..

checkout for huge spikes in NTDS counters\kerberos & ntlm authentications /se

cheers
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top