Information: Forum is in read-only mode
For details and other support options see https://www.adiscon.com/news/support-forum-set-to-read-only-mode/

Accounts unlocked but no 671 event recorded

Discuss Windows Event Log events. What they mean, what they tell you about your machine's security ... and whatever questions else you have.

Moderator: alorbach

Google Ads


Accounts unlocked but no 671 event recorded

Postby GoblinQueen » Mon Aug 07, 2006 11:54 am

Hi. I am experiencing something peculiar with user accounts.

Sometimes an account is locked out, then a little while later it appears
unlocked again. However, no 671 "unlock" event is recorded in the event logs at all. There is no policy set to automatically unlock user accounts after a certain time - all unlocks must be performed manually, however it appears either that accounts are being unlocked without intervention, or the accounts are being unlocked but the event is not recorded. Why would this be the case?

This is a mixed-mode 2003/2000 domain with 2003 on all domain controllers
GoblinQueen
New
 
Posts: 3
Joined: Thu Aug 03, 2006 2:51 pm

Solved

Postby GoblinQueen » Mon Aug 07, 2006 2:08 pm

This is actually due to a logging failure on 1 of the 4 domain controllers. All the account unlocks that have no 671 associated came from the same machine which has since been discovered not to be working properly.
GoblinQueen
New
 
Posts: 3
Joined: Thu Aug 03, 2006 2:51 pm

Google Ads



Return to Windows Events

Who is online

Users browsing this forum: No registered users and 1 guest

cron