account lockuot urgent

  • Thread starter Thread starter Guest
  • Start date Start date
"urgente bloqueos de cuentas en win 2003"
i have 50 account that are locked
and i unlock but the problem is same

Enable Account Logon Auditing failures and try again. Then view
the Security Event log to try to determine where the lockout is
being caused.

Usually with one or two machines such things are cause by an old
(now incorrect) user/password combination being hard coded into
a batch file, share connection, remote desktop etc.

But with 50 of them doing this your network MIGHT be under
password cracking attack.
 
I agree with Herb you may be getting attacked, to help narrow down the
problem.

Is the account logged into more than one machine or is it running a service
on the same machine? A user could have mapped drives to a resource from one
machine, on a different machine he changes his password and then the first
machine attempts to stay mapped to a drive and the password is no longer
correct and eventually locks the user out. Or after a password is changed a
service is running that attempts to authenticate with an old password.

To help try and track down where the account is getting locked out use
eventcomboMT.exe from the Account Lockout tools found out Microsoft's
website. Use the built in search AccountLockouts and search in the created
text files for the user in question.

http://www.microsoft.com/downloads/...familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"urgente bloqueos de cuentas en win 2003"
 
Back
Top