Account Lockout, Caller Computer Name MWG Gateway

Question

Hello Everyone,

I'm facing the same problem like this, Active Directory Account Lockouts Every Second of the Day - Microsoft Q&A getting lockout everyday but the caller computer name is (mwg) my proxy.

Does anyone facing the same things recently, please help me, because i got lot of user locked but i can't find where's the source is.

Thanks,

Answer 1

Hello GGTS,

Thank you for posting in Microsoft Community forum.

1.Did you find the caller computer name is (mwg) my proxy via Event ID 4740 or event ID 4771 (it means Kerberos authentication) or Event ID 4776 (it means NTLM authentication)?

If so, you can try to check information below on MWG Gatewa device:

•Check the credential management to see if there are cached user’s old credentials.

•Check if you have used the wrong password to mount the network disk.

•Check whether the user has used the wrong password to start services, run scheduled tasks, etc.

•Check if there are some programs that cache the user’s wrong password.

2.You mentioned lots of user locked, did you make any changes recently or before this problem occurs? Such as changes passwords or change any domain policy?

3.What is MWG Gateway device? Have these domain users signed in this device in the past?

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,

Daisy Zhou