NT Administrator account getting locked out from unknown source

SirNtwrk · 04-24-2006, 03:00 PM

We have a legacy domain used to authenticate users coming through some older 3com RAS servers (so we can't get rid of it yet) and a 2003 active directory. We changed the password for the administrator account recently and the account keeps getting locked out. We can still use it, but the account shows as "locked out" in User Manager.

We have checked everywhere we can think of to determine what is happening; scheduled tasks, services, remote login programs, and we cannot find the source of why the account is getting locked out.

Does anyone have any ideas? We log both success and failures for all logon attempts and cannot see any events in any of the three DCs that could cause this.

Chevy · 04-25-2006, 10:51 PM

You don't see any failed logon attempts for the Administrator account?

When was the last time the password was changed? Was this happening before or after that?

If after, then you need to look at the services and see if any are using the Administrator account as it's service account - you may have such a service that didn't get updated with the new password.

04-24-2006, 03:00 PM	#1 (permalink)
SirNtwrk Registered User Join Date: Aug 2005 Posts: 26 OS: Win XP SP2	NT Administrator account getting locked out from unknown source We have a legacy domain used to authenticate users coming through some older 3com RAS servers (so we can't get rid of it yet) and a 2003 active directory. We changed the password for the administrator account recently and the account keeps getting locked out. We can still use it, but the account shows as "locked out" in User Manager. We have checked everywhere we can think of to determine what is happening; scheduled tasks, services, remote login programs, and we cannot find the source of why the account is getting locked out. Does anyone have any ideas? We log both success and failures for all logon attempts and cannot see any events in any of the three DCs that could cause this.

04-25-2006, 10:51 PM	#2 (permalink)
Chevy Retired Join Date: Jul 2003 Location: Notlob Posts: 5,452 OS: Vista Ultimate My System	You don't see any failed logon attempts for the Administrator account? When was the last time the password was changed? Was this happening before or after that? If after, then you need to look at the services and see if any are using the Administrator account as it's service account - you may have such a service that didn't get updated with the new password.