Account Lockout

[anjal.shah]

When a account gets locked out, it registers an entry in AD with the
logon name, domain and workstation name. Where does the workstation
name get populated? How does it get populated>

 

[Jorge de Almeida Pinto [MVP - DS]]

the DC where the account gets locked logs this in the security event log on
that DC

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Roger Abell [MVP]]

Can you clarify what it is you are asking.
As you observe, the logon name, domain and workstation name
are recorded in the login failure security event log messages.
The workstation name comes from the messages used in the
logon attempt(s) that fail.