AD Accouts locked every 2 hrs

Edmond (ya) 1 Reputation point
2021-03-11T11:10:03.01+00:00

I have the problem of AD account locked out. The locked a/c have around 30 user account in every 2 hrs. Most caller name come from Exchange 2016 host. Try to reboot exchange and AD controller but no luck. Anyone please help to have idea to fix it out?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,221 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,500 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Fan Fan 15,321 Reputation points Microsoft Vendor
    2021-03-12T01:55:49.35+00:00

    Hi,
    Since you have already find the caller computer , then i would suggest you find the 4625 event on the caller computer.
    In the 4625 event will find the caller process.
    If there are not 4625events logged , you will need to enable the following audit policy.
    76985-3121.jpg

    Best Regards,