Re: Administrator account is not locking out

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Simon Geary (simon_geary_at_hotmail.com)
Date: 06/09/04 

Date: Wed, 9 Jun 2004 10:38:24 +0100

By default this account will not be locked out although there is an option
to allow it to do so. If it were possible to lock this account by default
you could easily imagine a scenario where the only admin account in the
domain was locked and your forest would be stuffed.

You can usually get the IP address of the PC where the logon attempts are
coming from from the security logs, if you're not sure how to do this post
back the hex values and I'll see if I can convert them to an IP.

"AdminKen" <anonymous@discussions.microsoft.com> wrote in message
news:E98E3686-9EC6-4248-B78D-124E277B0F63@microsoft.com...
> In W2K3 Server, if I have a domain/or domain controler lock out policy,
does it affect the Domain Administrator account (ie can the administrator
account be locked out)?
>
> I see a great deal of failed login attempts against "Administrator" in my
AD Security log but I don't see "Administrator" ever being locked out. (I
don't think anyone is attempting consol login.) Maybe a person is logged
into there local PC as local administrator and trying to connect to the
domain. Any thoughts?
>

Relevant Pages