Question about locked out accounts in AD

stephenp1983 · 01-13-2009, 04:29 PM

Is there a way to take a username and find out the source of it's lockout. For example say user abc is locked out. Can I search with that user name to see the machine name where the lock out occured. So if the user's machine name is home1234, but the lockout occur on another machine?

**bilbus** · 01-14-2009, 12:39 PM

if you enable auditing at the domain level yes, you can search for the account failure events

01-13-2009, 04:29 PM	#1 (permalink)
stephenp1983 Registered User Join Date: Jul 2006 Posts: 4 OS: xp	Question about locked out accounts in AD Is there a way to take a username and find out the source of it's lockout. For example say user abc is locked out. Can I search with that user name to see the machine name where the lock out occured. So if the user's machine name is home1234, but the lockout occur on another machine?

01-14-2009, 12:39 PM	#2 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	Re: Question about locked out accounts in AD if you enable auditing at the domain level yes, you can search for the account failure events