User account locked out without explanation

Discussion in 'Server Security' started by Brad, Jan 25, 2010.

  1. Brad

    Brad Guest

    We're running a W2K3 Active Directory environment. We have a problem with
    user's AD accounts getting locked out unexpectedly. An examination of the
    domain controller security event logs shows nothing like any bad password
    attempts leading up to the lockout. We did find a series of LSASRV events in
    the local PC System log, Event IDs 40961, and 40961, and in the Application
    log there were two USERENV events, IDs 1006 and 1030, coinciding exactly with
    the time the accounts get locked out. Google and Bing searches were not
    fruitful. I would appreciate any suggestions on where to look for
    information that would shed light on what relation, if any, these events have
    on the account getting locked out.
    Brad, Jan 25, 2010
    1. Advertisements

    1. Advertisements

  2. Brad


    Dec 13, 2011
    Likes Received:
    Jesse1113, Dec 13, 2011
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.