Accounts are getting locked

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

We are having a windows 2000 Server as a Domain Controller. Every now and
then, say every 20 days or so, all the 40 accounts are getting locked.
Unlocking was done manually going to property dialog of each user from Active
Directory Users and Computers. Recently we prepared a .CMD script to unlock
all the IDs.

I observed it happening on some weekends on few occasions. Don't remember
whether all the instances happened on weekends.

Antivirus is scheduled to start scanning on every Saturday. The scan takes
nearly 2 days. On Mondays afternoon it will complete scan operation. The
server has around 200 GB across SCSI disks.

We are having the server from nearly 2 years. Problem started happening from
last 8 months or so.

Please help me in overcoming this problem.

Thanks,
Harsha
 
A bit from left field, but could it be someone has penetrated your system to
the point of knowing the userids and is trying a dictionary attack??
 
Hi Harsha,

I would guess the larger chance of having security breaches (dictiionary
attack) by software like virus or the like. I assume the virus scan you
mentioned is on the server itself. So check out ALL your workstations and
make sure they are clean of viruses or trojan horses...

br,
Denis
 
Hi Harsha,

check in your DCs event viewer the security log. You should see where the
wrong credentials were coming from. Maybe you can find one system being
responsible for it.

Another thing you can try is to turn down all external connections for the
weekend if that is possible. If the problem persists you know that you have
an internal problem.

br
Marcus
 
Back
Top