Re: Finding Account Lockout Source

From: Steve Pope (spope_at_hbk.com)
Date: 07/30/03 

Date: Wed, 30 Jul 2003 14:11:01 -0500

Look for the following:

events 529 and 534 in the Security event log of the DC

"PattyMac" <pmacarthur@jenner.com> wrote in message
news:052901c356cc$14f20bb0$a101280a@phx.gbl...
> Recently changed a password on an account. Now that
> account keeps locking out every 10 minutes or so. How can
> I find out the source of the problem? My guess is there's
> a machine or service somewhere using that ID, but I don't
> know where. Can I find the IP or Machine name that's
> using that ID?
>
> Thanks for any feedback.

Relevant Pages

  • Re: How to Repair Install Windows XP??
    ... First, check that your security event log is not full, as it is ... such things as a login script that bombs can ... you account is not the built-in Administrator account. ... The built-in Administrator account is often left by OEMs ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Spammers die!
    ... Well I checked the security event log.. ... There are repeated Account Logon 680, Logon/Logoff 540, Privilege Use ... What is surprising is that I installed Exchange 2 ...
    (microsoft.public.exchange.setup)
  • Re: Spammers die!
    ... Well I checked the security event log.. ... There are repeated Account Logon 680, Logon/Logoff 540, Privilege Use ... What is surprising is that I installed Exchange 2 ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: Spammers die!
    ... Well I checked the security event log.. ... There are repeated Account Logon 680, Logon/Logoff 540, Privilege Use ... What is surprising is that I installed Exchange 2 ...
    (microsoft.public.exchange.misc)
  • Re: EBay and Hacked Accounts, A Cautionary Tale
    ... The most recent feedback was a negative, ... one, stating that his account had been hacked, seller beware. ... I then checked the winner's recent bid ... Dear [I've removed my eBay ID and email to foil spam bots], ...
    (rec.games.video.arcade.collecting)