Re: How to understand why a user account is locked

google for Netlogon Debugging to find out where it is coming from (as in which machine)

to see if a service is using it you could use the following script
ftp://falcon.msetechnology.com/scripts/svclist.cmd.txt

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"LtPitt" <d.nastri@xxxxxxxxx> wrote in message news:f898c4b9-10da-4689-b8a5-d1c0f3357c47@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello everybody...
I have a strange problem.
We switched to new security policies that forced us to use complex
passwords for all users in domain.
One administrative user keeps on locking on random time...
Probably there is one computer (we don't know which and where) that
still has the old password... Maybe in sql servero or in a service or
a network share... Or in a scheduled operation.

Is there any trick or commercial product to understand who locks this
user?

I really have no clue :(

Thank you for your help and attention,
Davide.

.

Relevant Pages

  • Re: Export Passwords from AD
    ... if you want to sync passwords from AD to something else, you might wanna have a look at ILM which contains PCNS ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... I can accept them as hashes if they can only be exported that way. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Infrastructure FSMO role owner attibute not correct in root do
    ... I connected to the infrastructure FSMO role holder for the root ... I don't know i that was the real "fix" or just a coincidence or not though. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Site link configuration question..
    ... "i have multiple BO link to the nearest HUB in a single Site Link?" ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... tCategory=siteLink" siteObjectBL ...
    (microsoft.public.windows.server.active_directory)
  • Re: Site link configuration question..
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adprep /rodcprep error message
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... Because of stale DNS records I strongly ... fSMORoleOwner: CN=NTDS ...
    (microsoft.public.windows.server.active_directory)