AD Account Lockout Troubleshooting Tool

preview_player
Показать описание
Easily find the source of account lockouts with the Active Directory Lockout Troubleshooting tool. This tool is 1 of 19 tools included in the AD Pro Toolkit.

This tool will collect the lockout event ID 4740 from all domain controllers and include the username and source IP or hostname of the lockout. The data is displayed in an easy to read grid so you can quickly find the source of the lockouts. The results can be searched, filtered and you can select the time frame.

The tool will also get event 4771 for kerberos pre-authentication failed attempts (bad password attempts). Event 4740 does not always include the source IP so event 4771 can help identify the source of failed attempts.

Learn More and Download:

Required audit log settings:

AD Pro Toolkit:
Рекомендации по теме