Jump to content


Photo

Account lockout notifications for disabled accounts


  • Please log in to reply
1 reply to this topic

#1 cms3161

cms3161

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 21 November 2018 - 02:54 PM

I just got slammed by Account Lockout Notifications for 8 accounts that are disabled in Active Directory, as well as two regular users. All of them have a BadPasswordTime attribute of years ago. Has anyone else seen similar issues with the ALE?



#2 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 117 posts
  • Gender:Male

Posted 21 November 2018 - 03:15 PM

Hi there,

 

ALE collects 4740 event id from security event log of domain controller(s) and based on the event informs if an account is being locked, so you may try to find out those events and it might give you an idea why it is going on, let's say based on Caller computer name of event id you may figure out where the failed logon attempts have been occurred.


Best regards,
Forum Engineer
 





0 user(s) are reading this topic

0 members, guests, anonymous users