All domain Accounts being locked out

  • Thread starter Thread starter Alasdair
  • Start date Start date
A

Alasdair

Hi,

On one of my 2000 Domains, all accounts are being locked out.
If I unlock an account, it will be locked again within a few minutes, even
an account that no-one or nothing uses.


I have lots of errors like

Authentication Ticket Request Failed:
User Name: ASPNET
Supplied Realm Name: xxx.yyy.com
Service Name: krbtgt/xxx.yyy.com
Ticket Options: 0x40810010
Failure Code: 0x6
Client Address: 192.168.30.97
 
This may be the clue:
User Name: ASPNET
Click to expand...

Sounds like a webserver process is trying to log-on as this user.
Might be faulty website coding, or might be an intrusion-attempt.
 
We tracked it down to an outbreak of Conficker.B virus (aka Downad or
Downadup).

In the end a very long phone session with MS Support helped us track it down
and do a manual removal on the infected machines.
 
Hello Alasdair.
What procedure that support Microsoft sent to resolve the problem?
The manual is how removal?
Thanks!
 
Alasdair said:
We tracked it down to an outbreak of Conficker.B virus (aka Downad or
Downadup).

In the end a very long phone session with MS Support helped us track it down
and do a manual removal on the infected machines.
Click to expand...
 
Back
Top