stev379 Posted January 7, 2011 Posted January 7, 2011 We have a domain admin service acct that's getting locked about every 15 minutes. Anyone know how to find out where (what machine name hopefully), the logon is failing? Thanks!
PsaltyDS Posted January 8, 2011 Posted January 8, 2011 You'll have to check the Security event logs at each domain controller to find the one that logged that event. Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law
stev379 Posted January 10, 2011 Author Posted January 10, 2011 You'll have to check the Security event logs at each domain controller to find the one that logged that event.We're on a fed campus and only have domain admin rights over our OU. Our OU has Users, Computers, OPS, etc, but we don't have access to the DC's event logs via anything other than scripts. Phooey.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now