Account Locked Out Troubleshooting

Account Locked Out Troubleshooting



Try to find the DC name where that account is locked out. You can use LOCKOUTSTATUS.EXE (MICROSOFT FREE TOOL) 

Find the below screenshot for DC name.



Download the Account Lockout and Management Tools.

http://www.microsoft.com/DOWNLOAD/EN/DETAILS.ASPX?DISPLAYLANG=EN&ID=18465 

After that use EVENTCOMBMT.EXE for searching the ACCOUNT LOCKED OUT events. That is a BUILT IN SEARCH in EVENTCOMBMT.EXE. Find the below screenshots. You will get the help for using the eventcombMT which is the part of the ALTOOLS.

EventCombMT





 

In EventcombMT's events are for 2003; you need to add the 2008 event if your DCs are 2008.

Windows Server 2008 log the event with ID 4740 for user account locked out

Windows Server 2003 log the event with ID 644 for user account locked out

 

Audit Events for disabled user 

Event ID: 629 for 2003
629+4096=4725 for 2008

Account Lockout Tools

http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx

Maintaining and Monitoring Account Lockout

http://technet.microsoft.com/en-us/library/cc776964.aspx

Troubleshooting Account Lockout

http://technet.microsoft.com/en-us/library/cc773155(v=ws.10).aspx

For additional help see the below links.


http://blogs.technet.com/b/askds/archive/tags/account+lockout/
http://www.windowstricks.in/2009/07/account-lockout.html

Scripts.

Get-LockedOutLocation (PS)

http://gallery.technet.microsoft.com/Get-LockedOutLocation-b2fd0cab#conten


Account Unlock & Password Reset Tool (PS)

http://gallery.technet.microsoft.com/Account-Unlock-Password-ce697d78


Email users about pending password expiration (VBS)

http://gallery.technet.microsoft.com/f7f5f7ed-14ee-4d0e-81c2-7d95ce7e08f5

ADDS Audit

http://social.technet.microsoft.com/wiki/contents/articles/15232.adds-audit.aspx

 

Leave a Comment
  • Please add 1 and 7 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Richard Mueller edited Revision 14. Comment: Remove blank headings, fix zeros in <a name> tags in headings in HTML

  • FZB edited Revision 11. Comment: changed toolname to match download description

Page 1 of 1 (2 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Great article!

  • Thanks Ed

  • Good Tools

  • FZB edited Revision 11. Comment: changed toolname to match download description

  • Richard Mueller edited Revision 14. Comment: Remove blank headings, fix zeros in <a name> tags in headings in HTML

  • Great Article and I appreciate your efforts i.Biswajith. Thanks a lot.

  • Thanks Venkat

  • Thanks Venkat

Page 1 of 1 (8 items)