Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I'm not familiar with the Active Directory and a User keeps getting locked out of their account for no reason at all. I am trying to find a 'log' to see when they log on/off but can not seem to find one.

share|improve this question

marked as duplicate by Greg Askew, dunxd, mdpc, voretaq7 Apr 3 '13 at 16:56

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2 Answers 2

You should enable auditing of "Account Logon Events" in "Domain Controller Security Policy".

You should then be able to see logon events in the Event Viewer on the DC.

share|improve this answer

I would tend to lean more toward the user is fat fingering their password.

Here's an article on it though: Finding why a user is locked out in Active Directory

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.