question

RajKumar-4574 avatar image
0 Votes"
RajKumar-4574 asked FanFan-MSFT commented

while logging to server 2016 standard, every user account locking in active directory

While login to windows server 2016 standard, every user account getting lock.

Any help to troubleshoot this issue would be appreciated.

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT commented

Hi,
Welcome to ask here!

Usually, for troubleshooting account lockout issue, we should follow the general troubleshooting steps below. For your reference:

  1. Enable audit policies for each DC then gather audit event from PDC. Check the vent 4740.
    To configure the audit policy under
    [Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit account management]

  2. According to the audit events on PDC determine which clients or DCs sent the failed authentication request. If the failed authentication request was sent by a DC, then we should gather the audit event on the DC. So, we can find out which clients sent the BAD password.

  3. After we get the workstations IP, then we need enable Audit Logon Events – Failure and Audit Process Tracking for this client, then analyze the event log to find out which process or apps send the BAD password.
    114738-7152.jpg


Note: we need increase security log size before we enable audit. It will overwrite previous log when the security log size is so small.

Feel free to let us know if you have any questions about the information provided.
Best Regards,


7152.jpg (74.8 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.


Hi,
If this question has any update?
Welcome to share your current situation.
Please feel free to let us know if you need further assistance.
Best Regards,

0 Votes 0 ·

Hi,
If there are any updates, welcome to share here!
Best Regards,

0 Votes 0 ·