Hi Joe
We have seen two causes for this (although there are others). First, we
had a service that was started using the user credentials. The password
was changed but the service was never updated. Everytime the service
attempted to start it would lock the account. The second time we found the
user had logged into a workstation that was locked, and she never logged
out. Something was running on the machine that would periodically access a
server drive - again with the credentials the machine was logged in with
before the password was changed, which locked her account every hour.
In both cases we checked the DC event log for failure audits which tracked
down the machine the problems were coming from (ip address) took the
machine offline and then went through to find out what was the problem.
The IP address may be another DC - which suggests the failed login happened
on that DC and then was replicated to the one you are looking at (in the
second machine case we tracked it through 3 DCs to find the actual
workstation IP address).
In your case, it would seem that Adobe was installed under the old users
account with a service type connection that keeps trying to start, using
her creds and the old password. I would check the event logs to make sure
the failed logins are coming from that IP and then if they are look at
uninstalling Adobe or the Adobe associated services.
Regards;
James R. Day
Active Directory Core Team
Office of the Chief Information Officer
National Park Service
(202) 354-1464 (direct)
(202) 371-1549 (fax)
[EMAIL PROTECTED]
|---------+---------------------------------->
| | "Pelle, Joe" |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | tivedir.org |
| | |
| | |
| | 03/25/2005 01:29 PM EST|
| | Please respond to |
| | ActiveDir |
|---------+---------------------------------->
>------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: [email protected]
|
| cc: (bcc: James Day/Contractor/NPS)
|
| Subject: [ActiveDir] AD user account keeps getting locked out
|
>------------------------------------------------------------------------------------------------------------------------------|
Hello!
I have a user account that continuously keeps getting locked out. Weâve
reset the userâs password (multiple times), took the computer off of the
domain, renamed the computer, put it back on the domain, etc. This user
works primarily out of her home office but is at our headquarters yesterday
and today. She had a junior admin reset her password and install some
software (adobe) yesterday and has had the problem ever since. Anyone been
done this road before?
Joe Pelle
Senior Infrastructure Architect
Information Technology
Valassis / IT
19975 Victor Parkway Livonia, MI 48152
Tel 734.591.7324 Fax 734.632.6151
[EMAIL PROTECTED]
http://www.valassis.com/
This message may include proprietary or protected information. If you are
not the intended recipient, please notify me, delete this message, and do
not further communicate the information contained herein without my express
written consent.
