Sign in to follow this  
Followers 0
stev379

Find where an account is getting locked

3 posts in this topic

We have a domain admin service acct that's getting locked about every 15 minutes.

Anyone know how to find out where (what machine name hopefully), the logon is failing?

Thanks!

Share this post


Link to post
Share on other sites



You'll have to check the Security event logs at each domain controller to find the one that logged that event.

:x


Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law

Share this post


Link to post
Share on other sites

You'll have to check the Security event logs at each domain controller to find the one that logged that event.

:x

We're on a fed campus and only have domain admin rights over our OU. Our OU has Users, Computers, OPS, etc, but we don't have access to the DC's event logs via anything other than scripts.

Phooey.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0