User Manager service in windows 10 is causing frequent lockout and need assistance in fixing this

Neelambiga Devi 21 Reputation points
2023-09-08T10:39:04.2266667+00:00

We are facing frequent lockout issues and upon checking our AD server the computer name is blank. So, checked the 4625 logs(unknown user name or bad password) on user computers and it pointed to svchost.exe which in turn pointed(process id) to User manager service. We use windows 10 and noticed that if this service is disabled and web account manager service is stopped, there are no lockout logs. However, when the pc is rebooted the pc goes blank and the task bar flashes. Please help me fix this issue with this service as it seems an important service as well as the service causing the issue. The PC has already been rebuilt as a last resort and we still see this issue. Also, this is happening with a lot of users in the company. Please let me know if more info is required.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,516 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,705 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Limitless Technology 43,916 Reputation points
    2023-09-11T15:20:17.69+00:00

    Hello

    Thank you for your question and reaching out.

    These are the common reasons for account lockouts:

    1. User error (typing the incorrect username or password)
    2. Programmes using credentials that are cached or active threads using outdated credentials
    3. Passwords for service accounts that the service control manager has cached
    4. Multiple computers are used by the same user, or disconnected remote terminal server sessions

    arranged tasks

    1. mappings for persistent drives
    2. Replication in Active Directory took longer
    3. Task Scheduler or Services running with Old password.

    --If the reply is helpful, please Upvote and Accept as answer--


  2. Neelambiga Devi 21 Reputation points
    2023-09-25T03:57:28.4733333+00:00

    Hi There, we were able to find the root cause from the 4625 logs on user's PC pointing to User manager service and we are stuck on how to proceed. User manager cannot be disabled as thr pc goes blank after a reboot with this service being disabled

    0 comments No comments

  3. Khaja Moinuddin Chisty 0 Reputation points
    2023-09-25T10:08:28.9033333+00:00
    0 comments No comments