Windows 11 How can I find the source of an Active Directory Locked out user?

  • Thread starter Thread starter Dennis Topo Jr
  • Start date Start date
D

Dennis Topo Jr

Hello all...I'm writing to see if someone can shed some light on a tricky account locked user issue I'm having.The user in question's AD account will get locked out randomly and repeatedly throughout the day. Her phone credentials are fine - no services etc running her workstation. I've enabled logging using this article as a guidehttps://4sysops.com/archives/find-the-source-of-account-lockouts-in-ad/ What is strange is with all the locked out events for this user (4740) found on the PDC- there is not a single 4625 (failed logon) event for her user (on the DCs). How then would the ac

Continue reading...
 
Back
Top