How to find what process is causing account lockout?


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 05:03 AM
WorkingStiff
 
Posts: n/a
Default How to find what process is causing account lockout?

I set up account lockout policies to lock an account after several tries, but when I
changed my password, the account gets locked out constantly (though just retrying a few
times usually gets me in). I've turned on as many security logging options as I can find,
but no logs show what process is causing the lockout. This lockout occurs even if I
disconnect the machine from the network, so it must be a process on the local machine.

How can I find what process is causing the lockout?

Thanks
RDPfan
Reply With Quote
  #2  
Old 01-05-2006, 05:03 AM
Jon Phipps
 
Posts: n/a
Default Re: How to find what process is causing account lockout?

what is the account lockout threshold? If it is too low it will lock out as
soon as the password is blown once


"WorkingStiff" <dicklimpo@yourpants.com> wrote in message
news:il4vp117mjoqa4ddefik86h2a8qikg6a3o@4ax.com...
>I set up account lockout policies to lock an account after several tries,
>but when I
> changed my password, the account gets locked out constantly (though just
> retrying a few
> times usually gets me in). I've turned on as many security logging
> options as I can find,
> but no logs show what process is causing the lockout. This lockout occurs
> even if I
> disconnect the machine from the network, so it must be a process on the
> local machine.
>
> How can I find what process is causing the lockout?
>
> Thanks
> RDPfan



Reply With Quote
  #3  
Old 01-05-2006, 05:04 AM
WorkingStiff
 
Posts: n/a
Default Re: How to find what process is causing account lockout?

Threshhold is actually high (about 20). I went through each service and found the ones
that were NT AUTHORITY/LocalService which had a password and changed them to the local
system acct and haven't had the problem since. I don't really understand what I did
exactly, but nothing has broken as far as I can tell so I guess this problem is solved.
thanks!

On Wed, 14 Dec 2005 09:24:48 -0700, "Jon Phipps" <jcphipps20@hotmail.com> wrote:

>what is the account lockout threshold? If it is too low it will lock out as
>soon as the password is blown once
>
>
>"WorkingStiff" <dicklimpo@yourpants.com> wrote in message
>news:il4vp117mjoqa4ddefik86h2a8qikg6a3o@4ax.com.. .
>>I set up account lockout policies to lock an account after several tries,
>>but when I
>> changed my password, the account gets locked out constantly (though just
>> retrying a few
>> times usually gets me in). I've turned on as many security logging
>> options as I can find,
>> but no logs show what process is causing the lockout. This lockout occurs
>> even if I
>> disconnect the machine from the network, so it must be a process on the
>> local machine.
>>
>> How can I find what process is causing the lockout?
>>
>> Thanks
>> RDPfan

>


Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Hijack problem Tom B. Windows XP Security Admin 7 01-05-2006 05:44 AM
winfixer infection Robert Windows XP Security Admin 7 01-05-2006 05:07 AM
How to get local account lockout status over network? jarkeld11@gmail.com Windows XP Security Admin 3 01-05-2006 05:05 AM
Have results from Hijackthis. Don't understand them!!! 1st half StanStan Windows XP General 15 01-05-2006 02:36 AM
PROBLEM: User Accounts SWolf15 Windows XP Basics 7 01-05-2006 02:05 AM


All times are GMT. The time now is 02:15 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

How to find what process is causing account lockout?