Strange problem with 2003 AD All accounts locked out

Discussion in 'Active Directory' started by gram, Dec 22, 2008.

  1. gram

    gram Guest

    I came into work this morning to find all accounts both UK and worldwide all
    locked out ( including Domain admins and all service accounts) A couple of
    people hadn't logged out from Friday so were able to unlock key accounts.

    We are running a single worldwide domain 2003 Version.

    I am struggling to find out the cause. Would it be that somebody created a
    strange group policy? or is it a problem with time service?

    I am at a loss.
     
    gram, Dec 22, 2008
    #1
    1. Advertisements

  2. gram

    Paul Bergson Guest

    In order to lock out an account you would have to try and log on with the
    credentials. Sounds kind of like you have some subversive work going on.
    Now if your time is skewed and users attempted to gain access that may have
    caused problems

    Check out an article I have on my website and see if it can help you out as
    far as determining where this may be occuring from.

    http://www.pbbergs.com/windows/articles.htm
    Select User Account Lockout Troubleshooting
     
    Paul Bergson, Dec 22, 2008
    #2
    1. Advertisements

  3. gram

    gram Guest

    No that is the point users arriving into work had not logged in, their
    accounts were already locked, mine included.
     
    gram, Dec 23, 2008
    #3
  4. gram

    gram Guest

    Found the cause, brute force attack.

    thanks


     
    gram, Dec 23, 2008
    #4
  5. gram

    Paul Bergson Guest

    Hopefully you found the individual as well.
     
    Paul Bergson, Dec 23, 2008
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.