Frequent machine account lockouts
I am getting the below frequent lockout error messages in couple of servers, can someone help me on fixing this please?
Logon Failure:
Reason: Account locked out
User Name:
Domain:
Logon Type: 3
Logon Process: Authz
Authentication Package: Kerberos
Workstation Name: Server12
Caller User Name: Server12$
Caller Domain: Net.com
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1064
Transited Services: -
Source Network Address: -
Source Port: -
January 28th, 2011 6:44am
Hello,
start with account lockout tools and also check for Conficker Virus:
http://www.microsoft.com/downloads/en/details.aspx?familyid=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx
http://www.pbbergs.com/windows/articles/UserAccountLockoutTroubleshooting.html
http://support.microsoft.com/kb/109626
Conficker: http://support.microsoft.com/kb/962007Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 7:06am
hi Meinolf,
Thanks for your prompt reply, I couldn't find the conficker virus in those systems. I have done an full system scan on both the server and confirmed with symantec on the updated definition files. I have just patched appinit.reg,
will restart and let you know the progress.
January 28th, 2011 7:47am
Hi Jaichandru,
Please also let us know the Event ID.
This thread has some more information
Account keeps locking out
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/415d165e-a004-479c-9644-b7f9263fc6d8/
Hope it helps.This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your
question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 8:59am