September 2003
Intermediate to advanced
624 pages
15h 49m
English
Content preview from Active Directory CookbookBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
6.10. Troubleshooting Account Lockout Problems
Problem
A user is having account lockout problems and you need to determine where it is getting locked from and how it is getting locked out.
Solution
Using a graphical user interface
LockoutStatus is a new tool
available
for Windows 2000 or Windows Server 2003 that can help identify which
domain controllers users are getting locked out. It works by querying
the lockout status of a user against all domain controllers in the
user’s domain.
To determine the lockout status of a user
Open
LockoutStatusand select File → Select Target from the menu.Enter the target user name and the domain of the user.
Click OK.
At this point, each domain controller in the domain will be queried and the results will be displayed.
Discussion
The Lockoutstatus.exe tool is just one of many
that are available in the new “Account Lockout and
Management” tool set provided by Microsoft. These
new lockout tools are intended to help administrators with account
lockout problems that are very difficult to troubleshoot given the
tools available under Windows 2000. Along with the tool mentioned in
the Solution Section, here are a few others that are included in the
set:
- ALockout.dll
A script that uses this DLL called EnableKerbLog.vbs is included with the tool set that can be used to enable logging of application authentication. This can help identify applications using bad credentials that are causing account lockouts.
- ALoInfo.exe
Displays services and shares that are using ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.