Here’s a very nicely done article on how to troubleshoot account lockout issues.

Keith Abluton describes a case study were users were being presented with random authentication prompts. The problem seemed to fix itself after about 15 minutes, so the admins had a hard time trying to isolate the circumstances around the problem.

When they called PSS, they ran the Netlogon logging tool and found out that the problem was related to malware that was triggering account lockouts.

Very nicely done – and give you another idea for your troubleshooting checklist so that you won’t even need to pull out the Netlogon tool when you encounter a similar issue.

Check out the article over at:

https://blogs.technet.com/isablog/archive/2009/06/...g.aspx

HTH,

Tom

Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer

Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING | Microsoft Forefront Security Specialist
Email: tshinder@isaserver.org
MVP — Forefront Edge Security (ISA/TMG/IAG)