Jump to content


Account lockout notifications for disabled accounts

  • Please log in to reply
1 reply to this topic

#1 cms3161



  • Members
  • Pip
  • 1 posts

Posted 21 November 2018 - 02:54 PM

I just got slammed by Account Lockout Notifications for 8 accounts that are disabled in Active Directory, as well as two regular users. All of them have a BadPasswordTime attribute of years ago. Has anyone else seen similar issues with the ALE?

#2 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 140 posts
  • Gender:Male

Posted 21 November 2018 - 03:15 PM

Hi there,


ALE collects 4740 event id from security event log of domain controller(s) and based on the event informs if an account is being locked, so you may try to find out those events and it might give you an idea why it is going on, let's say based on Caller computer name of event id you may figure out where the failed logon attempts have been occurred.

Best regards,
Forum Engineer

0 user(s) are reading this topic

0 members, guests, anonymous users