Windows Forum

Ask something
Discussion Locked

active directory account autolock

0 helpful
4 replies

by zab_rah

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hi,

i have a problem of autolock all accounts in my active directory, i also
havnt able to find out the cause of this problem, i have unlocked all
accounts manually now its working fine but this occurs second time in my
network, please help.

Regards,

zr

4 replies

by amjad zoghbi

Hello,

Accounts in active directory do not autolock. What is probably happening is that the users are typing more than 3 times (default) a wrong password, and this locks their account. you can disable this behavior using group policy.

Please rate this answer if it helps.

rgds

by p.j.hutchison

Locking is controlled using the Default Domain Policy. Look in Security Settings, Account Policies, Account Lockout Policy.
Normally you would set to lockout after 3 attempts.

by cmiller5400

So if I am reading your question correctly, all of your AD accounts are locking out? Make sure that auditing is enabled and you may beable to see where the accounts are being locked out. Maybe someone is running a hacking tool to guess passwords? Make sure that your forced password change policy is set correctly, e.g. 30 days, 90 days etc.

by jedwards33

The netwrix account lockout tool will tell you exactly why the lockouts are occurring and help you find out why they locked out. This tool can also unlock multiple accounts in bulk. URL: http://netwrix.com
Jake

This discussion is closed to new replies.