1

This morning I was forced to change my password on my Windows 8 laptop. Since then my Active Directory gets locked within seconds after login.

To me this looks like there's some nasty software that stored my passwords and tries to login with the outdated password until I get locked.

According to the help desk this happens withing seconds after login. But they cannot tell me what kind of program or service it is.

Any ideas how to find the guilty software?

5
  • 1
    Enable the appropriate events for logging within AD so you can figure out where the account is being locked from. It might be as simple as having a mail client that's using the old password.
    – Seth
    Jan 29, 2018 at 13:36
  • And how can I do that?
    – BetaRide
    Jan 29, 2018 at 13:38
  • Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once.
    – Ramhound
    Jan 29, 2018 at 13:52
  • Disable wifi/remove the wire and log on. Then check startup programs. Jan 29, 2018 at 13:59
  • 2
    Depending on your role you won't be able to do that. It has to be done by your IT department. For example see How to enable Audit Failure logs in Active Directory?.
    – Seth
    Jan 29, 2018 at 14:00

1 Answer 1

2

Check credential manager for anything that may have your AD password stored, this can be in the form of a Windows Credential.

Often times Outlook can cause this by keeping your password cached and then trying to start with the incorrect password.

4
  • How can I do that?
    – BetaRide
    Jan 29, 2018 at 13:54
  • Search for credential manager from the start screen. When it opens, it will list the stored credentials it knows about. Jan 29, 2018 at 13:58
  • What applications are installed? Have you restarted after you changed your password? Jan 29, 2018 at 14:02
  • Yes, several times.
    – BetaRide
    Jan 29, 2018 at 14:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .