1

This morning I was forced to change my password on my Windows 8 laptop. Since then my Active Directory gets locked within seconds after login.

To me this looks like there's some nasty software that stored my passwords and tries to login with the outdated password until I get locked.

According to the help desk this happens withing seconds after login. But they cannot tell me what kind of program or service it is.

Any ideas how to find the guilty software?

5
  • 1
    Enable the appropriate events for logging within AD so you can figure out where the account is being locked from. It might be as simple as having a mail client that's using the old password. – Seth Jan 29 '18 at 13:36
  • And how can I do that? – BetaRide Jan 29 '18 at 13:38
  • Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. – Ramhound Jan 29 '18 at 13:52
  • Disable wifi/remove the wire and log on. Then check startup programs. – davidbaumann Jan 29 '18 at 13:59
  • 2
    Depending on your role you won't be able to do that. It has to be done by your IT department. For example see How to enable Audit Failure logs in Active Directory?. – Seth Jan 29 '18 at 14:00
2

Check credential manager for anything that may have your AD password stored, this can be in the form of a Windows Credential.

Often times Outlook can cause this by keeping your password cached and then trying to start with the incorrect password.

4
  • How can I do that? – BetaRide Jan 29 '18 at 13:54
  • Search for credential manager from the start screen. When it opens, it will list the stored credentials it knows about. – Allen Howard Jan 29 '18 at 13:58
  • What applications are installed? Have you restarted after you changed your password? – Allen Howard Jan 29 '18 at 14:02
  • Yes, several times. – BetaRide Jan 29 '18 at 14:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.