/build/static/layout/Breadcrumb_cap_w.png

KACE: K1000: My Active Directory user accounts keep getting locked out

PROBLEM:

You have an Active Directory (AD) account that continues to get locked out. You have verified that the system that is locking it out is the KBOX.

 

How do you find out what process on the KBOX is locking it out?

 

SOLUTION:

 

Check the below sections and try changing or re-inputting  the user account credentials.

 

*=More common

 

  1. *Provisioning schedules
  2. *Replication Share
  3. *Proxy settings
  4. Scripting
    1. You can run scripts using "Run As". Check to see if you are using those.
  1. File synchronization
  2. User authentication (LDAP)
  3. LDAP labels
If you have multiple ORG's, be sure to check those as well. 
 
This helped me to look at my LDAP labels to see which ones were enabled:
 
1. Create a new SQL report
2. Query:
 select 
   *
from
   LDAP_FILTER;

 
There is a column for ENABLED. 1=enabled, 0=disabled. 
Posted 12 years ago 15979 views

Comments

  • Excellent suggestions ! This helped fix my problem by creating the SQL report. Thanks. - aaviles 11 years ago
    • can someone show me the query used please? - Aurum 7 years ago
      • It's in the article, it's just not very long haha!

        select
        *
        from
        LDAP_FILTER; - brucegoose03 7 years ago
  • Thanks for this, turned a potential big problem (no one could log in anymore) into a barely noticed hiccup. - News162 7 years ago
    • Excellent! I'm glad it was helpful. Same reasons what I created this was for the exact kind of problems I wanted to prevent. - brucegoose03 7 years ago
  • How do we address an entry? Or rather find which label it's attached to?
    The report returned mostly empty rows. Our service accounts showed as expected but my account (the one that gets locked) shows up once each with the 2 ports, 636 and 389.
    It doesn't return the name of a label. Just the ID's. - murbot 5 years ago
This post is locked
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ