Re: All AD User Accounts Locked

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Ryan Hanisco (rhanisco_at_flagshipis.com)
Date: 11/30/04


Date: Mon, 29 Nov 2004 20:01:44 -0600

I have seen this a few times and it has always been a virus. Make sure you
have auditing on and then enable accounts. The watch to see the failed
attempts on passwords... as they fail, the accounts will lock -- if its the
virus problem.

I can't remember the virus specifically, but UPDATE and so a full virus
sweep of your environment. If you can't do that -- spend the money and
deploy a full AV solution, otherwise cash in your chips and go home.

If its just an odd matter with your accounts locking, you can find samples
of ADSI scripts that will loop through accounts and change an attribute. I
would bet dollars to doughnuts, though, that its a virus.

-- 
Ryan Hanisco
MCSE, MCDBA
Flagship Integration Services
"Patrick Ruane" <Patrick Ruane@discussions.microsoft.com> wrote in message
news:336F9C48-EEA3-429B-AE10-78976351D5F0@microsoft.com...
> Hi Guys
>
> I have a problem with all my domain user accounts locking out at the same
> time.  It happens fairly randomly and we cannot identify any particular
event
> that causes this.  We have a 2000 domain in mixed mode with 95/98/2000/xp
> clients.  Has anyone come across this before, or knows of a reason why
this
> is happening?
>
> Also, does anyone have a script for unlocking all user accounts?
>
> Thanks in advance for any help.


Relevant Pages

  • Re: am I spamming??
    ... No viruses, no spyware and it happens if ... One of my accounts just fills up with bounce ... If you're lucky, there is a virus or other malware on your computer ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Entourage refuses correct password after incorrect one is entered
    ... the problem is reproducable across machines, accounts, users, etc. ... Can you test without SAM (I'm assuming this is virus software) disabled? ... There are no known Mac virus AFAIK. ... One of the top five MS Entourage resources listed on the Entourage Blog. ...
    (microsoft.public.mac.office.entourage)
  • RE: account locked
    ... Sounds like you may have a Virus running rampent in your environment. ... PHX-DC\emaexchadmin from TAHOE Entered ... crack passwords vai PHXDCw2DC001. ... If domain accounts are getting locked out daily; ...
    (microsoft.public.win2000.active_directory)
  • Re: Port settings and all
    ... For accounts, you will need to install them ... the (insert latest virus name here) virus, all mail sent to my personal ... | New disc and old disk both up and running. ... | Outgoing mail is certified Virus Free. ...
    (microsoft.public.outlook)
  • Re: UserAccountControl Attribute
    ... specific user objects (enabled user accounts) that appear to be missing those ... How can I view the attributes of the user objects in question? ... foreach (string parameter in Parameters) ...
    (microsoft.public.win2000.active_directory)