{"id":2954,"date":"2014-07-17T12:30:10","date_gmt":"2014-07-17T12:30:10","guid":{"rendered":"http:\/\/blog.eginnovations.com\/?p=2954"},"modified":"2022-08-23T08:17:38","modified_gmt":"2022-08-23T12:17:38","slug":"detecting-and-alerting-account-lockouts-in-active-directory-servers","status":"publish","type":"post","link":"https:\/\/www.eginnovations.com\/blog\/detecting-and-alerting-account-lockouts-in-active-directory-servers\/","title":{"rendered":"Detecting and Alerting Account Lockouts
in Active Directory Servers"},"content":{"rendered":"

<\/span>What are Active Directory Servers?<\/span><\/h2>\n

Active Directory (AD) servers<\/a> are not often seen as one of the most critical applications in an infrastructure, simply because they often work well. However, if a problem happens in the AD system, it will leave behind a lot of unhappy users. A number of routine tasks you perform in your enterprise network rely on AD. When you log into your desktop, you are authenticated by AD. The scripts that execute when you login are controlled by AD. The files you access can be authenticated by AD. Hence, a blip in your AD servers can severely impact the user experience. Therefore, the Active Directory servers need to be monitored carefully and continuously<\/a>.<\/p>\n

<\/span>Lockouts of User Accounts in Active Directory<\/span><\/h2>\n

One of the common problems that AD administrators have to deal with is lockouts of user accounts<\/a>. AD servers often have an account lockout policy set. When a user logs in multiple times and does not enter the right credentials, the account is locked out as a precaution against a brute force. Often an AD administrator has to manually unlock the account.<\/p>\n

\"Account<\/a><\/p>\n

In many cases, account lockouts can happen because of user mistakes (e.g., a user forgetting his\/her password, or not typing the password correctly). However, the most frustrating cases of account lockouts are the ones when a user entered the right credentials, yet the account was locked out. In such situations, Active Directory administrators often struggle to figure out what is going on.<\/p>\n

<\/span>Active Directory Accounts can be locked in Numerous Ways<\/strong><\/span><\/h2>\n

There are many situations in which an account can be locked out without the user knowing:<\/p>\n