Frqeunt Schema Admin Account Lockout
hello there,
we facing problem regarding lockout issue of our schema admin account, according events locked our dc after further analysis found out being locked server in our domain has terminal server(remote desktop service) role installed.
unable pinpoint root cause want know steps can perform next.
the steps have performed given below:
- pinpointed server locks out from
- reason bad password attempt
- checked if service or task scheduler using account nothing found server.
awaiting kind response next?
netlogon logs checked , found following events.1/16 08:29:46 [logon] [20944] samlogon: network logon of (null)\administrator qmhsvr01 entered
11/16 08:29:46 [critical] [20944] nlprintrpcdebug: couldn't eeinfo i_netlogonsamlogonex: 1761 (may legitimate 0xc000006a)
11/16 08:29:46 [logon] [20944] samlogon: network logon of (null)\administrator qmhsvr01 returns 0xc000006a
1/16 08:30:42 [logon] [20944] samlogon: network logon of (null)\administrator entered
11/16 08:30:42 [critical] [20944] nlprintrpcdebug: couldn't eeinfo i_netlogonsamlogonex: 1761 (may legitimate 0xc000006a)
11/16 08:30:42 [logon] [20944] samlogon: network logon of (null)\administrator returns 0xc000006a
11/16 08:30:45 [logon] [20944] samlogon: network logon of (null)\administrator entered
11/16 08:30:45 [critical] [20944] nlprintrpcdebug: couldn't eeinfo i_netlogonsamlogonex: 1761 (may legitimate 0xc000023
hi,
>>we facing problem regarding lockout issue of our schema admin account, according events locked our dc after further analysis found out being locked server in our domain has terminal server(remote desktop service) role installed.
please check similar thread , troubleshooting guide reference:
frequent domain account lockout issue
account locked out troubleshooting -eventcombmt
if don't help,for account lockout issue,you might want post on ds forum for further assistant,thank you:
https://social.technet.microsoft.com/forums/windowsserver/en-us/home?forum=winserverds
best regards,
cartman
please remember mark replies answers if , unmark them if provide no help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.
Windows Server > Security
Comments
Post a Comment