Steven
Tue Aug 29 18:59:36 CDT 2006
Make sure to check Scheduled tasks though that would tend to be more
regular. If the server is Windows 2003 make sure you delete or change and
"stored credentials" for your user account. What might help is to configure
auditing of process tracking on the server temporarily to see if you find
any useful information about a related process that happens at the same time
as the logon failure. The link below is to a white paper that can help you
track down what is causing the lockout and some tools that can help you do
so such as ALockout.dll.
Steve
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
http://www.microsoft.com/downloads/details.aspx?FamilyID=8c8e0d90-a13b-4977-a4fc-3e2b67e3748e&displaylang=en
http://www.mail.nih.gov/user/faq/AccountLockouts.htm
"Jon Bakersfield" <JB@blingo.chartruse.com> wrote in message
news:e3t16A8yGHA.1300@TK2MSFTNGP05.phx.gbl...
>I recently changed my password, after doing so I am finding that one of our
> servers is using my credentials for some event and is causing my account
> to
> lock out. The requests do not come at regular intervals, and typically
> come
> a couple at a time. First 2 then another 3 or first 1 then 2 more then
> another 2. In any case I'm going mad trying to figure this one out.
>
> Here's some other ideas I've already tried...Anyone else have suggestions
> on
> how I can find what is using my credentials on a regular basis?
>
> The server in question has no rogue RDP/ terminal server sessions that
> would
> cause this.
> None of the services listed show my username in the 'Log on as' field.
> There are no mapped drives (other than loginscript drives) that reference
> my
> user info.
> If there was any question about a profile not being able to unload I
> installed and ran the "UPHclean" utility from Microsoft.
>
> Thanks!
>
>