for starters - check out:
 
and
 
steve
 
----- Original Message -----
Sent: Tuesday, November 15, 2005 2:12 AM
Subject: [ActiveDir] User accounts getting locked out..


Hi All,

I am facing one strange issue. All of sudden my user accounts are getting locked out in certain OU's. The event logs says

Event Id - 675, AUDIT FAILURE, Security, Mon Nov 14 12:50:57 2005, NT AUTHORITY\SYSTEM, Pre-authentication failed:   User Name: xyz    User ID:  %{xyz}     Service Name: krbtgt/domain name     Pre-Authentication Type: 0x2     Failure Code: 0x18     Client Address: IP address.
   
Event Id - 644, AUDIT SUCCESS, Security, Mon Nov 14 12:50:56 2005, NT AUTHORITY\SYSTEM, User Account Locked Out:     Target Account Name: xyz     Target Account ID: %{xyz}     Caller Machine Name: Name of the machine     Caller User Name: Name of the DC    Caller Domain: Domain Name     Caller Logon ID: (0x0,0x3E7)    


They also get clear after some time automatically.  One reason which i figure out is that it could be related to the system time of the client machine with the system time of DC ( Related to failure of Kerberos ticket ) .  Any other pointers???  

Thanks in Advance.

Regards,
Sudhir Kaushal
Systems Engineer (GIS)
Computer Sciences Corporation.
India - + 91 120 2582323 Ext. 2649
Denmark - + 45 70100024 Ext. 2649
 
“You never win Silver, You lose Gold”


--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Reply via email to