Re: Account getting locked out - Need to find out by whom!
From: Ben Smith [MS] (bensmi@microsoft.com)
Date: 08/09/02
- Next message: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Previous message: Ben Smith [MS]: "Re: ACL Issue - Easy Question"
- In reply to: NTNEWS: "Account getting locked out - Need to find out by whom!"
- Next in thread: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Ben Smith [MS] <bensmi@microsoft.com> Date: Fri, 9 Aug 2002 08:53:03 -0700
In article <eb25Qa7PCHA.1936@tkmsftngp08>, NTNEWS
(thanksalot@sc.rr.com) writes...
> We have a password policy that locks accounts out after 5 bad password
> attempts. It than resets it after 5 minutes. We have auditing turned on
> for everything. We have one account that continuously gets locked out. We
> unluck it and within minutes it gets locked again. We have a native mode
> Win2k domain. I have looked on all the Domain controllers for event ID 539
> which should be "Account locked out".
>
> What are the best steps to zero in on finding out where an account is
> getting locked out from??
>
> thanksalot@sc.rr.com
>
>
>
>
>
Enable Account Logon failure auditing on all DCs.
-- Ben Smith Microsoft Training and Certification Are you secure? http://www.microsoft.com/security This posting is provided “AS IS” with no warranties, and confers no rights.
- Next message: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Previous message: Ben Smith [MS]: "Re: ACL Issue - Easy Question"
- In reply to: NTNEWS: "Account getting locked out - Need to find out by whom!"
- Next in thread: Ben Smith [MS]: "Re: Account getting locked out - Need to find out by whom!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
