Re: Account getting locked out - Need to find out by whom!
From: karl [x y] (jamescagney90210@excite.com)
Date: 08/09/02
- Next message: Ben Smith [MS]: "Re: SMTP banner mods ?"
- Previous message: JC: "Problem installing SUS Server"
- In reply to: NTNEWS: "Account getting locked out - Need to find out by whom!"
- Next in thread: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "karl [x y]" <jamescagney90210@excite.com> Date: Fri, 9 Aug 2002 11:51:09 -0400
The first thing I check for is other computers or servers where that login
ID has been logged in, and where the password on that ID has been changed
after the login ID was changed using another workstation. Also, drives
that have been mapped through Windows that reconnect at logon can cause this
problem, as can services set to log in as that login ID with an old
password. I can't think of any automated tools that would help check for
these.
"NTNEWS" <thanksalot@sc.rr.com> wrote in message
news:eb25Qa7PCHA.1936@tkmsftngp08...
> We have a password policy that locks accounts out after 5 bad password
> attempts. It than resets it after 5 minutes. We have auditing turned on
> for everything. We have one account that continuously gets locked out.
We
> unluck it and within minutes it gets locked again. We have a native mode
> Win2k domain. I have looked on all the Domain controllers for event ID
539
> which should be "Account locked out".
>
> What are the best steps to zero in on finding out where an account is
> getting locked out from??
>
> thanksalot@sc.rr.com
>
>
>
>
- Next message: Ben Smith [MS]: "Re: SMTP banner mods ?"
- Previous message: JC: "Problem installing SUS Server"
- In reply to: NTNEWS: "Account getting locked out - Need to find out by whom!"
- Next in thread: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
