Re: Account Lockout

the DC where the account gets locked logs this in the security event log on
that DC

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
<anjal.shah@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1166664498.415864.305790@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
When a account gets locked out, it registers an entry in AD with the
logon name, domain and workstation name. Where does the workstation
name get populated? How does it get populated>



.

Relevant Pages

  • Re: AD Users and Computers snap-in
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... an XP workstation without installing the entire AdminPak. ...
    (microsoft.public.windows.server.active_directory)
  • Domain security
    ... I have recently installed an an security event log monitor ... which amongst other thing can be configured to ... sent real-time alerts when certain categories of security ... there a way to lock the IP address or Workstation which is ...
    (microsoft.public.security)
  • Re: AD Group Detective - Need to know who created a particular SG
    ... check that DC its security event log for account management using the ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... group was created without a valid description, and no detailed information ...
    (microsoft.public.windows.server.active_directory)
  • Security Audit Events
    ... I've recently turned on the Security Event Log Auditing on my WinXP ... workstation and am seeing strange events being logged. ... Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 ... Source Workstation: SROBINSO ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Logging/tracking AD changes
    ... you need to turn on auditing for Directory Service Access (success). ... then check the security event log ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)