I'm new to the IT world and could really use some help with an issue we're facing. One of our customers who connects to a virtual machine (VM) via Remote Desktop is constantly getting her account locked out. Normally, everything works fine, but today her account seems to be on a never-ending lockout cycle. We've tried to unlock her account manually both through the interface and PowerShell as an administrator, but nothing seems to work; it stays unlocked for just a minute before getting locked again.
I suspect that there might be another machine she previously logged into that's sending login requests—perhaps with outdated credentials—which is causing the constant lockouts. I've checked the event logs for event ID 4740, and I can see a specific computer name that's linked to the lockouts, but we can't find the physical machine. If we were to remotely shut down this machine, would that potentially solve the lockout issue? Has anyone else dealt with a similar situation? Any advice would be greatly appreciated!
1 Answer
Definitely check out Microsoft's Account Lockout and Management Tool. It can help you troubleshoot these lockouts without diving into all the logs manually. I've found it incredibly helpful before!
This tool has been a lifesaver for me in the past too!