Tag Archives: AD

Where is an AD Account Lockout Occurring?

How often do you hear “my account keeps getting locked out” followed by “I’m not typing my password wrong”? I’ve found the easiest and quickest way to determine where the account lockout occurred is to query the PDC Emulator with Powershell. You may require a domain admin to do this. Depending on your environment, if you are seeing lockouts occurring on a workstation, it will generally be typing a password wrong or saved credentials somewhere. If you are seeing them at a UAG or CAS server, investigate their activesync devices. If you need to remove┬áthese ActiveSync devices: If you get an error like “An unexpected error has occurred and a Watson dump is being generated: Object reference not set to an instance” then set this before running remove:

Posted in Technology | Tagged , , , | Leave a comment