|
| |||||||||
| Tags: account locked, accounts, locked |
![]() |
| | Thread Tools | Search this Thread |
|
#1
| |||
| |||
| All domain Accounts being locked out
Hi, On one of my 2000 Domains, all accounts are being locked out. If I unlock an account, it will be locked again within a few minutes, even an account that no-one or nothing uses. I have lots of errors like Authentication Ticket Request Failed: User Name: ASPNET Supplied Realm Name: xxx.yyy.com Service Name: krbtgt/xxx.yyy.com Ticket Options: 0x40810010 Failure Code: 0x6 Client Address: 192.168.30.97 |
|
#2
| |||
| |||
| RE: All domain Accounts being locked out
This may be the clue: > User Name: ASPNET Sounds like a webserver process is trying to log-on as this user. Might be faulty website coding, or might be an intrusion-attempt. "Alasdair" wrote: > Hi, > > On one of my 2000 Domains, all accounts are being locked out. > If I unlock an account, it will be locked again within a few minutes, even > an account that no-one or nothing uses. > > > I have lots of errors like > > Authentication Ticket Request Failed: > User Name: ASPNET > Supplied Realm Name: xxx.yyy.com > Service Name: krbtgt/xxx.yyy.com > Ticket Options: 0x40810010 > Failure Code: 0x6 > Client Address: 192.168.30.97 > > |
|
#3
| |||
| |||
| RE: All domain Accounts being locked out
We tracked it down to an outbreak of Conficker.B virus (aka Downad or Downadup). In the end a very long phone session with MS Support helped us track it down and do a manual removal on the infected machines. "Anteaus" wrote: > This may be the clue: > > User Name: ASPNET > > Sounds like a webserver process is trying to log-on as this user. > Might be faulty website coding, or might be an intrusion-attempt. > > "Alasdair" wrote: > > > Hi, > > > > On one of my 2000 Domains, all accounts are being locked out. > > If I unlock an account, it will be locked again within a few minutes, even > > an account that no-one or nothing uses. > > > > > > I have lots of errors like > > > > Authentication Ticket Request Failed: > > User Name: ASPNET > > Supplied Realm Name: xxx.yyy.com > > Service Name: krbtgt/xxx.yyy.com > > Ticket Options: 0x40810010 > > Failure Code: 0x6 > > Client Address: 192.168.30.97 > > > > |
|
#4
| |||
| |||
| RE: All domain Accounts being locked out
Hello Alasdair. What procedure that support Microsoft sent to resolve the problem? The manual is how removal? Thanks! "Alasdair" wrote: > We tracked it down to an outbreak of Conficker.B virus (aka Downad or > Downadup). > > In the end a very long phone session with MS Support helped us track it down > and do a manual removal on the infected machines. > > "Anteaus" wrote: > > > This may be the clue: > > > User Name: ASPNET > > > > Sounds like a webserver process is trying to log-on as this user. > > Might be faulty website coding, or might be an intrusion-attempt. > > > > "Alasdair" wrote: > > > > > Hi, > > > > > > On one of my 2000 Domains, all accounts are being locked out. > > > If I unlock an account, it will be locked again within a few minutes, even > > > an account that no-one or nothing uses. > > > > > > > > > I have lots of errors like > > > > > > Authentication Ticket Request Failed: > > > User Name: ASPNET > > > Supplied Realm Name: xxx.yyy.com > > > Service Name: krbtgt/xxx.yyy.com > > > Ticket Options: 0x40810010 > > > Failure Code: 0x6 > > > Client Address: 192.168.30.97 > > > > > > |
|
#5
| |||
| |||
| RE: All domain Accounts being locked out "Alasdair" wrote: > We tracked it down to an outbreak of Conficker.B virus (aka Downad or > Downadup). > > In the end a very long phone session with MS Support helped us track it down > and do a manual removal on the infected machines. > > "Anteaus" wrote: > > > This may be the clue: > > > User Name: ASPNET > > > > Sounds like a webserver process is trying to log-on as this user. > > Might be faulty website coding, or might be an intrusion-attempt. > > > > "Alasdair" wrote: > > > > > Hi, > > > > > > On one of my 2000 Domains, all accounts are being locked out. > > > If I unlock an account, it will be locked again within a few minutes, even > > > an account that no-one or nothing uses. > > > > > > > > > I have lots of errors like > > > > > > Authentication Ticket Request Failed: > > > User Name: ASPNET > > > Supplied Realm Name: xxx.yyy.com > > > Service Name: krbtgt/xxx.yyy.com > > > Ticket Options: 0x40810010 > > > Failure Code: 0x6 > > > Client Address: 192.168.30.97 > > > > > > |
|
#6
| |||
| |||
| Re: All domain Accounts being locked out
Are there any resources online to understanding the ticket option codes? |
![]() |
|
| Thread Tools | Search this Thread |
| |
Similar Threads for: "All domain Accounts being locked out" | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| User accounts getting locked out frequently | Tom Edelbrok | Windows Server Help | 4 | 26-09-2010 11:42 AM |
| All accounts locked 2003r2 domain, help | Guillermo G. Lovato | Active Directory | 8 | 12-01-2010 03:40 AM |
| Show locked out accounts in ad mmc | Paco | Active Directory | 9 | 23-07-2009 02:41 AM |
| Locked out of User Accounts after Vista to XP restore | lguthrie98 | Operating Systems | 4 | 16-05-2009 11:31 AM |
| Minimum security settings of computer accounts for allowing domain user account to join domain | M C | Active Directory | 2 | 18-08-2008 11:17 PM |