some user are locked frequently when they are trying to access window 2008 AD's Fileserver

i met 1 problem @ window 2008 active directory.

havnt found case in eventviewer , still cant search event id.
problem 1 active directory user locked in morning when open computer.
using ubuntu 12 desktop. problem cant login im or windows network access fileserver.

unlock account @ ad server everytime not solution
becoz hvnt found suspected error log id in eventviewer account lock
if hv solution kind of problem, let me yr suggestion.

check if auditing enabled in environment

computer configuration\policies\windows settings\security settings\local policies\audit policy\audit account logon event & audit logon events ...select both success , failure

then can have events , corresponding data workstation bad logon attempts being generated

advanced security audit policy step-by-step guide
http://technet.microsoft.com/en-us/library/dd408940(v=ws.10).aspx

jump step 2: creating , verifying advanced audit policy

---

hope helps __________________________ best regards sarang tinguria mcp, mcsa, mcts disclaimer: posting provided no warranties or guarantees , confers no rights.

Windows Server  >  Directory Services