Windows Server 2003 account locking issue

ashweb · 02-28-2007, 03:24 PM

Hi All!

At work here we have Windows Server 2003 domain that holds all of our active directory user accounts.

One user in particular has a recurring problem where his account locks out all the time.

I'm at a loss as to where to start with this issue as I'm not overly familiar with Windows servers. Maybe it has something to do with his pc?

From the user's desktop event logs, I have the following errors/warnings:

Any help would be much appreciated!

Thanks

Ash

**cjessee** · 02-28-2007, 04:45 PM

In the security portion of the event viewer, are you auditing unsuccessful login attempts? If so they should show up there.

What time does the employee start, about 8:00am? It could be as simple has the employee misentering the password on accident.... or even on purpose. Anyway, report back what the security log says.

ashweb · 02-28-2007, 06:43 PM

Hi cjessee, thanks for your help.

We figured out what the issue was - a scheduled task an old machine was logging into the server with this user's account details.

Because he recently updated his password, the task was failing 3 times with a wrong password, causing his account to lock!

**cjessee** · 02-28-2007, 07:11 PM

Glad you found the problem...

02-28-2007, 03:24 PM	#1 (permalink)
ashweb Registered User Join Date: Feb 2007 Posts: 2 OS: XP	Windows Server 2003 account locking issue Hi All! At work here we have Windows Server 2003 domain that holds all of our active directory user accounts. One user in particular has a recurring problem where his account locks out all the time. I'm at a loss as to where to start with this issue as I'm not overly familiar with Windows servers. Maybe it has something to do with his pc? From the user's desktop event logs, I have the following errors/warnings: Any help would be much appreciated! Thanks Ash

02-28-2007, 04:45 PM	#2 (permalink)
cjessee Uh oh. Join Date: Aug 2005 Location: Ohio Posts: 794 OS: Windows NT/2000/XP, Dictaphone, Windows 2003 Server	In the security portion of the event viewer, are you auditing unsuccessful login attempts? If so they should show up there. What time does the employee start, about 8:00am? It could be as simple has the employee misentering the password on accident.... or even on purpose. Anyway, report back what the security log says.

02-28-2007, 06:43 PM	#3 (permalink)
ashweb Registered User Join Date: Feb 2007 Posts: 2 OS: XP	Hi cjessee, thanks for your help. We figured out what the issue was - a scheduled task an old machine was logging into the server with this user's account details. Because he recently updated his password, the task was failing 3 times with a wrong password, causing his account to lock!

02-28-2007, 07:11 PM	#4 (permalink)
cjessee Uh oh. Join Date: Aug 2005 Location: Ohio Posts: 794 OS: Windows NT/2000/XP, Dictaphone, Windows 2003 Server	Glad you found the problem...