Account Lockout

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

After I changed the password on a service account, the account is being
locked and I can't figure out which computer is using the account or how it
is being locked. When I go back to the old password the account is fine. Can
any one offer any help in solving this problem. Thanks in advance.
 
kfc5616 said:
After I changed the password on a service account, the account is being
locked and I can't figure out which computer is using the account or how
it
is being locked. When I go back to the old password the account is fine.
Can
any one offer any help in solving this problem. Thanks in advance.

Try "Account Logon Auditing" to record these logon errors
and help troubleshoot the source.
 
From the EventComb logs you can search for the user name, this usually
points to a DC.

Run EventComb account lockouts against the DC where the account was
locking out and you should have a new log with the exact IP address of
where the account is locking out.

It should be noted that you could also assume the account is used to
run the same service on all machines where the application is
installed, therefore you will nedd to go and change the password on the
same service on all those machines.
 
Back
Top