Site Overlay

Account keeps locking

The account is repeatedly locked out in Active Directory.

If the account keeps being locked out and you can't find the cause, you can review the event logs on your Active Directory servers. Let's select the

Event ID number as 4740 and filter it.

image 20

After seeing which device the account is locked on, you need to check the following actions.

  • The account used for the Schedule Task
  • Accounts defined for processes running on different servers, computers, or applications
  • Centralized programs that perform user authentication or verification (AD authentication, or application-layer control, etc.)
  • Network shares mapped to your computer
  • Shortcuts that work with Run As (RunAs)
  • Accounts defined as Service Account
  • Mobile devices with your account defined after you change your account password
  • A malicious software infection of a user's computer
  • Accounts used on mobile devices that work with ActiveSync.