If your system has a 'max-attempts' - is there some automated process, or even someone trying to get into the system using her id -
Logs should (I hope) show failed attempts to login, and - if you're lucky, the source device of those attempts . Me - I'd have given her a new id and put a block on the old one - at least for a couple of days of checking. JimB From: [email protected] [mailto:[email protected]] On Behalf Of David McSpadden Sent: Tuesday, June 23, 2015 3:07 PM To: '[email protected]' Subject: [NTSysADM] User lock out User changed password. Keeps getting locked out. Removes email from phone. Resets password. Keeps getting locked out. Logs or events show attempts from the exchange server. What tool can I use to determine exactly what is causing the bad attempts that are locking her out? David McSpadden Systems Administrator Indiana Members Credit Union P: 317.554.8190 | F: 317.554.8106 <http://imcu.com/> Description: imcu email icon <https://www.facebook.com/IndianaMembersCU> Description: facebook email icon <https://twitter.com/IndMembersCU> Description: twitter email icon Description: email logo mcp2 This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email.
