Track Account Lockouts

[kochg]

Hi,

I have a problem with a service account that was used by someone on the network to log on to his local machine. Now the password of that account has changed, and the account keeps locking out (every minute). this is because someone is still logged on with this account and the old password.

How can I track which computer causes the domain account to lock out every time?

So, if I have a user account, how can I see on which pc it is currently used?

Thanks in advance!

G

 

[Davetoo]

Check your event log, under Security. It will show at the bottom from what workstation the user is coming from.

Dave