Have you downloaded the Account Lockout Tool from Microsoft.com? That can give some clues as to where and why an account locks out.
Tony From: [email protected] [mailto:[email protected]] On Behalf Of James Button Sent: 23 June 2015 15:15 To: [email protected] Subject: RE: [NTSysADM] User lock out If your system has a 'max-attempts' - is there some automated process, or even someone trying to get into the system using her id - Logs should (I hope) show failed attempts to login, and - if you're lucky, the source device of those attempts . Me - I'd have given her a new id and put a block on the old one - at least for a couple of days of checking. JimB From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of David McSpadden Sent: Tuesday, June 23, 2015 3:07 PM To: '[email protected]' Subject: [NTSysADM] User lock out User changed password. Keeps getting locked out. Removes email from phone. Resets password. Keeps getting locked out. Logs or events show attempts from the exchange server. What tool can I use to determine exactly what is causing the bad attempts that are locking her out? David McSpadden Systems Administrator Indiana Members Credit Union P: 317.554.8190 | F: 317.554.8106 [Description: imcu email icon]<http://imcu.com/> [Description: facebook email icon] <https://www.facebook.com/IndianaMembersCU> [Description: twitter email icon] <https://twitter.com/IndMembersCU> [Description: email logo] [mcp2] This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email. ________________________________ This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and delete or destroy this communication and all copies. TRVDiscDefault::1201
