Domain User Accounts Are Being Locked Out

The referenced account is currently locked out and may not be logged on to.

Domain user accounts are being locked out. Some users who authenticate to an ssid with 802 1x their domain user accounts are blocked after 3 attempts which is strange check ise logs and detect that you try 3 times to log in incorrectly and your account is locked. This just started last week. Figuring out the root cause of this problem is important. One on my users is being locked out of his active directory account on a daily basis.

It s common for helpdesk to open active directory users and computers search for the locked account then go to the account tab to see if they are locked. I ll show you two methods that are 10x faster. One way to do this is to use powershell and the activedirectory module. Unlocking and resetting user accounts is one of the top requests helpdesk deal with daily.

I can see that the reason for the lockout is a failed number of password attempts. When there are too many login attempts occurred the account used to attempt will get locked out. Sometimes there are situations when the ad user account keeps locking out this happens when you try to log on to a domain computer and getting an error on the login screen. By default after 5 bad password attempts the domain account will be locked out by the active directory server.

This notification means the account is automatically temporarily blocked by the active directory domain security policy and can t be used to login to the domain computer. To get to the bottom of why the account is being locked out here are a few tips and tricks you can try.