Account Lockup problem

  • Thread starter Thread starter Prasheel
  • Start date Start date
P

Prasheel

We are having a big problem users being randomly locked.
When I checked the logs I get the following message.
The logon to account: Administrator
by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
from workstation: WIN2000
failed. The error code was: 3221225578


How could i fix this problem.. I check microsoft, talk
about the subject doesn't really explain what cause that
problem & fix it.. Please advise..

Thank you..
 
First make sure that your network has proper firewall protection from the
interenet. Those events indicate attempts to access the built in
administrator account with a bad password. Go to a self scan site such as
http://scan.sygatetech.com/ to do a self scan to see if you have unecessary
vulnerabilites - particualry ports 139 and 445. I would also find out where
the attempts are coming from. If these are happening from the lan, then you
know what workstation initiated the bad logon and you may want to question
the user or see if there are mapped drives with persistent credentials,
services, Scheduled Tasks using expired/incorrect passwords, etc. The links
below may be helpful. --- Steve

http://www.microsoft.com/downloads/...90-a13b-4977-a4fc-3e2b67e3748e&displaylang=en

http://support.microsoft.com/default.aspx?scid=kb;en-us;273499
 
I was having the same problem and here's how I fixed it. I have IIS
running locally on my machine and found that I had configured one of
the webs to use my account for anonymous access instead of the
IUSR_Machine account.

If this sounds like a situation you may have, open Internet Services
Manager. Right click on a web, choose properties, choose directory
Security, chose Edit for the Anonymous Access section at the top, If
the Anonymous Access item is checked click the Edit button, check the
username and password that is entered there. If it's IUSR_xxxx then
leave it. If it's your username then correct the password.
 
Back
Top