Windows Forum

Ask something
Discussion Locked

Domain account lockouts

0 helpful
4 replies

by tedb

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Our company has been having a problem with domain account lockouts for over a year now. We outsourced our network to a company and since have been seeing thse lockouts. THe domain controllers are running Win2k3 server and our desktops/laptops are primarily WinXP.

The domain account lockouts for some of our users happens everyday, several times a day. For other users, it only happens every couple of months but when it happens, the acct is locked out several times a day. This happens on the LAN in the office and over VPN.

The network/windows admins don't seem to be able to figure out why this is happening. I've looked through the Event Viewer on the users systems and don't see anything.

If anybody has any suggestions or has seen this before I would appreciate any information you think might help track down why this is happening.

4 replies

by faradhi

Be sure you are logging Login Failures. The logs should show the IP address of the machine generating the failure.

by tedb

Thanks for that info. Our Windows admin shows the offending IP in the security logs but it doesn't tell us why this is happening.

The domain acct is set so the password never expires and the user has not changed the domain password recently. We have also removed all mapped drives.

???? very strange

by opiate

So then the IP is internal? Sure no one is running some sort of an internal BF?

by tedb

Our Windows Admin seems to have resolved at least one machine by removing it from the domain, deleting computer from AD, then adding it back into the domain.

His explaination was that the computer became dijoined somehow from the domain. Strange since it just joined the domain. It has not locked since the admin did the fix though.

This discussion is closed to new replies.