Frequent Account Locked in SBS 2003 , Account Lockout (Event ID: 539)
HiWe are getting frequent account locked problem from all user in network in every morning from last one month, we have changed our Antivirus with Kaspersky Solutions, and all but still getting this error : {Account Lockout (Event ID: 539)}, Please reply if you any more solution or suggestion for the same issue.We have ONE DC (SBS 2003) and one ADC ( Windows Server 2003 Std) installed in our Network.Thanks in AdvanceVikas Sagar
September 30th, 2009 8:21am
Have you FailureLogon audit enabled on your DC's? If yes, you need to check source workstation that generate failure audits and remove it from network.[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2009 9:04am
These are the log on my DC, but workstation name (INDUS) itself DC host name.Logon Failure:
Reason:
Account locked out
User Name:
pradeep.k.shukla
Domain:
hiplintranet
Logon Type:
8
Logon Process:
Advapi
Authentication Package:
Negotiate
Workstation Name:
INDUS
Caller User Name:
INDUS$
Caller Domain:
HIPLINTRANET
Caller Logon ID:
(0x0,0x3E7)
Caller Process ID: 5004
Transited Services: -
Source Network Address:
203.88.21.199
Source Port:
1954, ThanksVikas
September 30th, 2009 10:53am
Your accounts are lockeddue passwordbrute force via your IIS server. As far as I understand, you have Basic authentication enabled only on your IIS server. Try to disable Basic Authentication and switch to Integrated (or something else) authentication.[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2009 12:51pm
OkTell me what will be the impact, to od this on my SBS 2003 , exchange hosted enviorment.and where should i have to change ?Thanks in advanceVikas Sagar
October 1st, 2009 7:58am
If you have Exchange server installed, perhaps you use OWA features. You need to open IIS management console, select properties of each your web site and change authentication level in Directory Security tab.[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
October 1st, 2009 11:22am
I checked IIS Properties, but it showing Intergrated authentication enable, Please suggest.ThanksVikas
October 1st, 2009 1:33pm
did you check this setting in every website/application?[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
October 1st, 2009 2:17pm
HiI checked reagain, on Default Web Site its showing Intergrated authentication enable, but in sub site l.ike exchange its showing Basic Authentication and some where both Basic and Intergrated authentication enable.Please Suggest.ThanksVikas Sagar Thanks
Vikas Sagar
October 5th, 2009 4:15pm
try to change Basic Authentication to Integrated.[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
October 5th, 2009 4:16pm
HiWhen i tried to change the authentiaction method, unable to login through OWA.SuggestVikasThanks
Vikas Sagar
October 5th, 2009 5:25pm
Have you enabled SSL for OWA?[http://www.sysadmins.lv]
As always enjoy the automation of tools
within the Windows-based, .NET aware,
WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2009 8:31pm