Answer the question
In order to leave comments, you need to log in
How to identify the source of an account lockout in AD?
Good afternoon.
There is a domain, after 3 unsuccessful attempts the user's account is blocked.
Suddenly, mass blocking of various domain accounts began. In the logs I see a PC with the name sa0775, which is not typical for our network. The PC does not respond, there is no record of it in either DHCP or DNS.
How can you calculate this PC?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question