Conficker cause the AD account lock

**devpat** · 02-04-2009

2 weeks ago my outer surface of HOL, called the results of my colleagues who told me that a lot of units users their accounts were locked, and locked inside original AD account are 3 times the wrong input on the lock, Occasionally, users have the general account was locked, but the mass was locked, I think there is definitely a problem. does any one have such experienced please reply .
thank you.

**Steve123** · 02-04-2009

something same happen here if looked Log, 675's a lot of, that is, guessing passwords, hackers have my doubts, and then put the main error of the network segment to the fiber pulled out, a result not all the log 675, and self-account lock, which is most likely a worm.

**Big Fish** · 02-04-2009

Internet search, then indeed there is a similar worm -- this worm has a better name to listen to --- Conficker

Microsoft yesterday released a worm on this topic page

http://www.microsoft.com/protect/com...conficker.mspx

Know the reason, the next is very simple to do, to the various departments of the network administrator:

1. To apply the latest patch, are not allowed to slip through the net

2. With the special kill Symantec, Symantec engineers yesterday to inform me Release a new version of

http://www.symantec.com/security_res...011316-0247-99

3. The corporate Symantec SAV client is updated to the latest version, there is not allowed to slip through the net, in fact, automatic updates are normal, but the client still has some questions

4. To 360 security guards to protect the U disk to open automatically

**Zachary** · 02-04-2009

Now basically under control worms. I thought about locking AD Account has a white paper, I have not seen, download Address:

http://www.microsoft.com/downloads/d...displaylang=en

Introduce one of a variety of error log, and recommend a number of Microsoft Finally a small tool for troubleshooting AD account lock

I have summed up the look:

First of all, which opened at the Group Policy Audit: Account Logon Events, if necessary DC on view, it is necessary to the strategy of DC Edit