Posted: Mon Nov 16, 2009 6:36 pm Post subject: AD Lockout Issue
I'm typically very good at tracking down account lockout issues, but this one is giving me a hard time.
Part of the problem is that the source/ip address is not listed in the event. The source workstation is "cisco" which more than likely has something to do with our wireless network. Lucky for me, our network team is out sourced and it's like pulling teeth getting help.
So where I'd like to start is understanding the event in generic terms. Is the event below simply related to pre-authentication or is it service related?
Posted: Thu Mar 04, 2010 9:36 am Post subject: same problem here
I have the same problem... but mine also sometimes accompanied by a blank "Source Workstation" for the same logon account.
Is somekind of Cisco's hardware may cause this?
I was able to resolve this, but I don't know if the same will apply to your network/environment.
We use a Cisco VPN solution. When clients connect to the Cisco VPN solution, their computer name is masked and replaced with "CISCO".
I had one of our network engineers look at the logs for the same time the lockout was happened and the easily determined the offending IP address and "real" computer name of the system.
Once I had the actual system name, I was able to resolve the issue through normal account lockout troubleshooting.
I'm not sure you read the post correctly. The problem was identifying the workstation name and ip address. They were being masked by a vpn concentrator. Once I had the IP address, I was able to resolve the lockout.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Featured Links*
Looking for more Windows Networking info?
Sign up to the WindowsNetworking.com Monthly Newsletter, written by Enterprise Security MVP Deb Shinder, containing news, the hottest tips, Networking links of the month and much more. Subscribe today and don't miss a thing! View a sample newsletter.
Become a WindowsNetworking.com member!
Discuss your Windows Networking issues with thousands of other Windows Newtorking experts. Click here to join!