Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on [email protected] for help. Thanks :)
Hello All, This is just a friendly reminder to read the Forum Charter where you wish to post before posting in it. :)
Hi all, The AutoSave Draft feature is now disabled across the site. The decision to disable the feature was made via a poll last year. The delay in putting it in place was due to a bug/update issue. This should serve as a reminder to manually save your drafts if you wish to keep them. Thanks, The Boards Team.
Hello all! This is just a quick reminder to ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere.

Active Directory (Windows)

  • 10-12-2009 12:15pm
    #1
    Registered Users Posts: 73 ✭✭ nd2no


    Hi All,

    Just wondering if anyone knows about event ID'd within security log of 2003 server? I ma trying to audit bad passwords on our network Event ID 675. When a user enters a bad password loggin onto a machine it triggers event id 675 with service name krbtgt\domain, after 4 attempts they are locked out.

    However during the course off the day I am noticing the same event ID trigger maybe 20 times a day with no lockout. The only difference is the event ID has a service name of krbtgt\domain.net.local. Anyone know why their is a differnce in service names within the event ID?


Comments

  • Registered Users Posts: 6,860 ✭✭✭ mada999


    grab altools from the web and use the 'LockoutStatus.exe' to find out what DC it is getting locked out from... check the event logs of hte DC to find out where the account is getting locked from

    happened me before... i had some stored cached credentials for RDP


  • Closed Accounts Posts: 17,208 ✭✭✭✭ aidan_walsh


    Not really the right forum for this, as well as being ye olde bump.


This discussion has been closed.
Advertisement