Re: Account lockouts

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/17/05 

Date: Sun, 16 Jan 2005 22:59:57 -0500

Not sure why you didn't find the lockouts in your logs. The fact that they are
there now is good. :)

If you want to quickly find locked out accounts, swing by www.joeware.net and
look at the free windows tools and look for unlock. It is a tool that will very
quickly give you a list of all locked out accounts in a domain, it can also
unlock them all very quickly as well.

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
BFT wrote:
> I have a pretty big problem on my hands.  I have account lockout occurring on 
> my network.  I fond a SAM error in my system log that I tracked down to an 
> office over in Asia. I thought it might be a virus but was not. It seems to 
> be some type of spy ware called  securenet.exe anyway it looks like it uses 
> the outlook address book and attempts to log on to active directory. Well I 
> have my lockouts set and it locked accounts all week. I finally got the admin 
> in that office to shut off those pc and reinstall them.  
> 
> Any way here is the real problem I had been unlocking accounts all week 
> which equals thousands of unlocks. I printed my security log and the locks 
> didn’t show up. Now all weekend I have been watching the security log and 
> they seem to be appearing now. 
> 
> Has anyone ever had this problem and if so what can I do to stop the locks 
> if the continue.  I thought it might just be a backlog of active directory 
> transactions.  Any ideas im at a loss.
>

Relevant Pages

  • Re: Remote password change/account unlock
    ... Allowing users to change or reset their passwords or unlock their accounts ... There are security implications to having a service running as ...
    (microsoft.public.win2000.security)
  • Re: How 2 confirm delegation?
    ... How are you trying to unlock and/or reset accounts? ... > delegated control of a group to this new security group ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Righs to unlock accounts:Set "read/write accountlockout" time, but option is still gra
    ... > I need to allow helpdesk to 'unlock' accounts under a certain OU. ... > then click Delegate Control from the menu that is displayed. ... The Delegation of Control Wizard should be displayed. ...
    (microsoft.public.win2000.active_directory)
  • Re: unlock user accounts en masse
    ... I have a sample program to find out if a given user is locked out, ... and then allow the user to unlock the account linked here: ... here is a sample program to document all accounts ... You might want to use a program that lists all locked out users, ...
    (microsoft.public.windows.server.scripting)