hidden hit counter
Welcome to WindowsForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Tracking down account lockouts

  
   Win 2000/NT/98/ME (Home) -> Active Directory RSS
Next:  Migrating active directory and exchange  
Author Message
rop.jason

External


Since: Feb 16, 2006
Posts: 1



(Msg. 1) Posted: Thu Feb 14, 2008 8:41 am
Post subject: Tracking down account lockouts
Archived from groups: microsoft>public>win2000>active_directory (more info?)
From a domain controller, is there a way to see which workstation
incorrect logins/account lockouts are coming from? Everything I can
find says you have to go to the workstation to identify what is
generating the incorrect logins. I don't care so much at this point
what is generating them, I need to identify the workstation they are
coming from.

Thanks
Jason

 >> Stay informed about: Tracking down account lockouts 
Back to top
Login to vote
Jorge de Almeida Pinto [M

External


Since: Aug 22, 2006
Posts: 80



(Msg. 2) Posted: Thu Feb 14, 2008 4:37 pm
Post subject: Re: Tracking down account lockouts [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
use NETLOGON debug logging

Enabling debug logging for the Net Logon service
HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag
DBFlag = 0x2080FFFF (in: %windir%\debug\netlogon.log)


google for "NETLOGON debug logging" and you will find more info

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
wrote in message

>
> From a domain controller, is there a way to see which workstation
> incorrect logins/account lockouts are coming from? Everything I can
> find says you have to go to the workstation to identify what is
> generating the incorrect logins. I don't care so much at this point
> what is generating them, I need to identify the workstation they are
> coming from.
>
> Thanks
> Jason

 >> Stay informed about: Tracking down account lockouts 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Distributed Link Tracking - I'm looking to upgrade my domain from 2000 to 2003. Part of the best practice is to disable the DLT Server service. Is there anyway to tell the ramifications if I disable this? There are thousands of objects in my ObjectMoveTable OU. I disable the...

Tracking User who delted files???? - I have a Win2000 Server running Active DIrectory. I have a situation where I KNOW that some files were deleted. I cannot prove if they were deleted by accident or maliciously, but I have my suspiciions. I CAN narrow the possibilities because the files..

Account Lockout - Is there a utility that can be used to determine where a particular account is getting locked out from. I have a user's account that is getting locked out periodically. Most likely it's due to some service attempting to log in under that users'..

AD account lock - Hi, Some of our users are having problems when changing passwords. We have set a group policy to have users to change their passwords from time to time. However, some users when changing passwords would have their account locked. After the account is..

user account - I have a user that signs into the domain with a workstation that has windows 2000 pro. For the past few days every time she signs in it is creating a new profile on the workstation. I looked under Documents and Settings and saw the following..
   Win 2000/NT/98/ME (Home) -> Active Directory All times are: Eastern Time (US & Canada)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
 Windows XP
  Win 2000/NT/98/ME
 Windows Vista!

[ Contact us | Terms of Service/Privacy Policy ]