Administrator account locked out

  • Thread starter Thread starter Alice
  • Start date Start date
A

Alice

In one of my domains, the domain administrator account
keeps getting locked out. There seems to be nothing in
the logs to indicate a problem, which is intermittent.
Where can I look?
Thanks.
 
Turn on security logging. Did you recently change the password? Did you also
change that password on services using the administrators account?

Marina
 
Yes, I did just change the password on the account, but I
also changed the administrator password in another domain
and it is not having the same problems.
There are no services using the account. Thanks.
 
Hello !
Take a look in the system local policies account, option
lock out policy account, it's possible to define a time
and reset ...

Laurent
 
The are most likely one of three suspects here:

1> Service set to run as Administrator
2> Scheduled Task set to run as Administrator
3> Someone who thinks they still know the password trying to logon ... I bet
my money on #1 or #2, since it almost always is one of those two ... Enable
security logging, centralize your logs (or check them all individually) and
you'll track down the issue pretty quickly ...
 
Back
Top