Re: Account lockout every hour

Paul Bergson wrote:
Are you logged into more than one machine? Usually what happens is a user has mapped drives to a resource from one machine, on a different machine he changes his password and then the first machine attempts to stay mapped to a drive and the password is no longer correct and eventually locks the user out.

To help try and track down where the account is getting locked out use eventcomboMT.exe from the Account Lockout tools found out Microsoft's website. Use the built in search AccountLockouts and search in the created text files for the user in question.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e




Thank you very much for your time Paul.

As an administrator, I logon quite a few times a day to various machines, especially on servers (by RDP). The lockout events happen on our PDC. The thing is, even since I:
-Logged Off from all machines
-Changed my password
-Removed all drive maps
....the lockout still happens.

I mean, even if we accept that happend what you described (suppose I changed my passwd at a very bad time), why is this still happening? Even server reboot didn't help...


I have just run the tool you suggested but it show anything more than I already knew. Any way, this is all I managed to get:

552,AUDIT SUCCESS,Security,Fri May 05 19:11:32 2006,NT AUTHORITY\SYSTEM,Logon attempt using explicit credentials: Logged on user: User Name: PDC$ Domain: MYDOM Logon ID: (0x0,0x3E7) Logon GUID: {5450dWWW-74ed-WWWW-759d-c115b8ecWWWW} User whose credentials were used: Target User Name: MyUserName Target Domain: MYDOM Target Logon GUID: - Target Server Name: PDC.MYDOM.local Target Server Info: PDC.MDOM.local Caller Process ID: 2360 Source Network Address: - Source Port: -


Process 2360 is tcpsvcs.exe
.

Relevant Pages

  • RE: PATCH: cdrecord: avoiding scsi device numbering for ide devices
    ... card was added to a system. ... target, and a device is replaced, then the devices are going to move around ... This is better for tape drives, but if you need to replace one, you ...
    (Linux-Kernel)
  • Re: XPe newbie needs some help
    ... When I use that as the target device, ... Boot drive: D: ... I am 1/2 way there now as far as understanding how XPe works. ... I have a high res dual screen DVI graphic card and a few usb drives hooked to the PC. ...
    (microsoft.public.windowsxp.embedded)
  • Problems with Booting XPe from CD-ROM
    ... target is the Pentium based VMEBus Single Board Computer VR9 from SBS, ... informations about my target board and then adding the necessary EWF ... Now my el torito disk had been found and ewfmgr ... that USB drives will not function. ...
    (microsoft.public.windowsxp.embedded)
  • SUMMARY: Conflicting tape devices from boot -r
    ... Bertrand_Hutin, Dennis Martens, Darren Dunham, John Warr, and Rick Caldwell. ... drives at the tape library, those are the ID's you should be seeing in the ... > (more config data below the problem text) ... > Target 5 ...
    (SunManagers)
  • Re: Use of target-server in large networks
    ... I assume your target can ping your Tornado host? ... This can be caused by the Cisco Deterministic Network Extender, ... which mucks about with MTU setting, causing Target Server transfers ...
    (comp.os.vxworks)