Accoutn being locked out repeatedly

[Guest Kelly Armitage]

We havea corporate domain, and are experiencing an issue with one of the

administrator accounts. It constantly locks/disables itself, and it takes

less than 10-20 seconds from the time I go in (another admin) and unlock it.

 

At first we thought it was a problem with his phone synching with Exchange,

but we have eliminated that variable and it still occurs. Furthermore, when

checking the security section of the event viewer on the domain controller,

there4 are no associated login failures which would cause an account to be

locked out. I have enabled the account, refreshed the event viewer, ... no

failed attempts, then looked at the account again and it is locked out. All

of this happens in 10 seconds or so. I am not sure what else I can check as

the only policy we have in place to disable an account takes place when there

are 3 failed logins.

 

Any other suggestions I can look at or investigate? The DC is Server 2003

and the system the other admin uses is an XP machine (but I do not beleive

that is relevant).

 

I would love to hear from any of you, thanks in advance.

[Guest James Jardine]

Are there any services set up to run under the credentials of that account?

 

 

On 8/11/08 12:24 PM, in article

D851C7E9-1B53-48E2-BC9C-3DC0C0F68BA7@microsoft.com, "Kelly Armitage"

<KellyArmitage@discussions.microsoft.com> wrote:

<span style="color:blue">

> We havea corporate domain, and are experiencing an issue with one of the

> administrator accounts. It constantly locks/disables itself, and it takes

> less than 10-20 seconds from the time I go in (another admin) and unlock it.

>

> At first we thought it was a problem with his phone synching with Exchange,

> but we have eliminated that variable and it still occurs. Furthermore, when

> checking the security section of the event viewer on the domain controller,

> there4 are no associated login failures which would cause an account to be

> locked out. I have enabled the account, refreshed the event viewer, ... no

> failed attempts, then looked at the account again and it is locked out. All

> of this happens in 10 seconds or so. I am not sure what else I can check as

> the only policy we have in place to disable an account takes place when there

> are 3 failed logins.

>

> Any other suggestions I can look at or investigate? The DC is Server 2003

> and the system the other admin uses is an XP machine (but I do not beleive

> that is relevant).

>

> I would love to hear from any of you, thanks in advance.</span>