Urgent: All AD users are locked out

[Peach]

Sponsored Links

We are on a Windows 2003 Domain with more than 400 users account. Today in the evening all users are locked out frequently? Can anyone tell me how to solve this issue? Thanks.

[Hockson]

It looks to me that you might have got virus on your network or some other person is trying to crack passwords. Are you able to logon to any of your domain controllers? If so, then check the security log for event ID 644, which is logged when an account is locked. Check the value for Caller Machine Name, that should tell you where the account lockouts are coming from.

[Techguru01]

First of all try to enable auditing and check the security logs where those lockouts happen. Also check whether loosening the security policy is an option for you or instead of locking users completely out, disable the account for some minutes and see what happens.

[dkumar]

Thanks to Identify the root cause. many organization is facing the same issue. This Article would really helps to others.. Thanks again