Re: Account locking out

From: Molnir (Molnir_at_discussions.microsoft.com)
Date: 06/29/05 

Date: Wed, 29 Jun 2005 10:26:04 -0700

"Steven L Umbach" wrote:

> I believe if you search the security logs of all the domain controllers for
> lockout events ID's that it may show the user account name and computer
> name - but not 100 percent sure. Just make sure that you have auditing of
> account management enabled in Domain Controller Security Policy also. Event
> Comb will be very useful for you in searching the domain controller security
> logs for specific event ID's. The other thing you could try is to netlogon
> logging on your domain controllers starting with the pdc fsmo. There is a
> free tool to parse the netlogon log looking for logon failures. The link
> below may help which includes tools to use and a link to a white paper on
> account lockouts that also explains netlogon logging. --- Steve
>
> http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

Thanks!

Relevant Pages

  • Re: Computer Management Security Problem
    ... I have check all other built-in and other groups and most users simply belong to the "Domain User" group with no specific or extra privileges. ... > accounts on the domain controller or are a member of a privileged group on the domain ... Note that XP Pro computers can have stored credentials. ... Enable auditing of account management in your Domain Controller Security ...
    (microsoft.public.win2000.security)
  • Re: Adding Computers to the Domain
    ... then review your security logs in Event Viewer on the domain controllers for Event ID ... right -add workstations to the domain in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: Adding Computers to the Domain
    ... > right -add workstations to the domain in Domain Controller Security ... >> Alex Anderson ...
    (microsoft.public.win2000.security)
  • Re: Domain Security Policy vs Domain Controller Security Policy
    ... Does Domain Controller Security ... > Policy just effect the DCs and Domain Security Policy effect the whole ... > domain which includes the DCs? ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Error
    ... correct operating system or you can get weird error messages if you do not ... > If I try to open Domain Controller Security Policy I receive the same ... > error from my original post. ...
    (microsoft.public.win2000.security)