How JustAnswer Works:
  • Ask an Expert
    Experts are full of valuable knowledge and are ready to help with any question. Credentials confirmed by a Fortune 500 verification firm.
  • Get a Professional Answer
    Via email, text message, or notification as you wait on our site. Ask follow up questions if you need to.
  • 100% Satisfaction Guarantee
    Rate the answer you receive.
Ask Jess M. Your Own Question
Jess M.
Jess M., Computer Support Specialist
Category: Software
Satisfied Customers: 654
Experience:  Computer Software Support specialist for more that 10 years
49766785
Type Your Software Question Here...
Jess M. is online now
A new question is answered every 9 seconds

Domain joined PC's Active directory user account get's

Customer Question

Domain joined PC's Active directory user account get's locked out repeatedly with message: the referenced Account is currently locked out and may not be logged on to"
How can I resolve this issue?
Submitted: 2 months ago.
Category: Software
Expert:  UranIT replied 2 months ago.

Hello and thanks for using JustAnswer.com I am Serge and I will try my best to answer your question

HOw many computers are in the domain and how many computers are having this issue?

Customer: replied 2 months ago.
100plus computers and only one user having the issue
Expert:  UranIT replied 2 months ago.

If this is happening to only one computer, then probably use has their old password ***** somewhere on the PC.

Try going to "Credentials" and see if there is anything saved here.

usually it happens when user tries to access resource with incorrect password ***** many times.

You can unlock that user from AD Users and Computers.

Customer: replied 2 months ago.
User has cleared the credentials from credential manager too.Yet it happens .We have also unlocked that user account from AD users and Computers
Expert:  UranIT replied 2 months ago.

Also, it could be that someone else is trying to access network with that user's username and locking that user out.

check in logs on the DC to see if anything comes up with that user there

Customer: replied 2 months ago.
Checked and it's not the case
Customer: replied 2 months ago.
Is it possible that some service is configured related to installed software using user account and old password?If so how can I trace which service is the one to check?
Customer: replied 2 months ago.
Also can I resolve this via secpol.msc?
Expert:  UranIT replied 2 months ago.

Event Viewer would do

Customer: replied 2 months ago.
Event viewer > security logs
Expert:  UranIT replied 2 months ago.

yes

Customer: replied 2 months ago.
I'm unable to locate for the user from eventviewer.Is there an easy way out to track this.Perhaps powershell, to see on what PC /Server the user may have some service configured mapped to his domain username?
Expert:  UranIT replied 2 months ago.

I recommend my customers using Netwrix for this type of tracking/logging, but as far as powerhell - I am not sure, I will opt out and another expert might have an idea

Customer: replied 2 months ago.
Hi seeking a solution for this issue since user getting locked out repeatedly
Expert:  PC_Wizzard replied 2 months ago.

Hi Werner here

Can you check on the affected pc in event viewer under Security logs for Event ID 4625

It will give you more details.

Customer: replied 2 months ago.
Thanks resolved now by checking event Id details