Is there a way to determine why my domain account keeps getting locked out? I keep finding myself locking my machine then coming back, trying to log in and getting the "Your account has been locked out" message. I keep having to have IT reset my password.

link|improve this question

75% accept rate
5  
How about asking IT? – GregD Jan 6 '11 at 16:28
Agree with GregD, this should be something you should be discussing with your IT department. There are event logs and security policies to consider for troubleshooting this. – l0c0b0x Jan 6 '11 at 16:31
feedback

closed as off topic by Jason Berg, GregD, l0c0b0x, jscott, sysadmin1138 Jan 6 '11 at 16:48

Questions on Server Fault are expected to generally relate to servers, networking, or desktop infrastructure, within the scope defined in the faq.

3 Answers

One cause could be if you're account is configured to run some kind of task or service at an interval and the credentials cached on that task/service are invalid.

link|improve this answer
feedback

Check out EventComb from Microsoft. Not sure what your rights on the domain are, but this link tells how to use it to search the event logs on the Domain Controller for account lockouts among other things. We just used this tool to find out which machine was locking out a user who was getting locked out several times a day and didn't know why. Download is here.

link|improve this answer
feedback

One other possibilty is that you have a mapped drive that has cached credentials that are invalid. The system keeps trying to connect and finally is locked out for bad attempts. Basically similar to the scheduled task or service mentioned by Chis W

Always a good idea to ask the admin as they have the needed tools as noted.

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.