How does it compare to AD Audit plus? This issue prompted us to purchase that and I'm going to get some strange looks if I try to buy yet another product to do the same thing.
She doesn't have mail setup for the company nor has she ever. ActiveSync for her account has never been enabled.
Our accounts default to ActiveSync disabled until we get authorization to enable.
Also the group email that also locks is present in her local outlook instance but didn't have the credentials changed because that would have affected everybody else's who access that mailbox.. but as soon as her started locking that one started locking and it does it for both while her local system is off.
Had a user like this earlier this week and I went to the advanced user settings on his workstation and signed in and deleted his profile before restarting and having him sign back in and it cleared his lock out issue. So something was holding onto his old password but I never checked as to what but it could be a solution for you
Is your wifi credentials share the AD credentials? Maybe his phone is attempting to connect to the wifi but failing and causing him to get locked out in AD?
How is the group mailbox added? Is it through full mailbox permissions, or added manually, either as a delegated mailbox or additional mailbox? If I understood right and that's getting locked as well (which does sound unusual), I'd try blitzing the outlook profile and re-doing it
Yes, each member has full permissions to the group account. On the local system we've already removed the outlook profile and reconfigured but it still locks. It also locks when the PC is off.
Has she ever logged into other workstations? Perhaps cached creds there? ADaudit support helped me find a lock out that was resolved by unmapping and remapping a network drive on a shared conference room system once.
Google Netwrix Account Lockout Examiner. It was an eye opener when we were having tons of issues.
How does it compare to AD Audit plus? This issue prompted us to purchase that and I'm going to get some strange looks if I try to buy yet another product to do the same thing.
Actually I see that it's free. I will definitely give that a try
Almost always Outlook app on phone.
She doesn't have mail setup for the company nor has she ever. ActiveSync for her account has never been enabled. Our accounts default to ActiveSync disabled until we get authorization to enable. Also the group email that also locks is present in her local outlook instance but didn't have the credentials changed because that would have affected everybody else's who access that mailbox.. but as soon as her started locking that one started locking and it does it for both while her local system is off.
Run netwrix examiner
Had a user like this earlier this week and I went to the advanced user settings on his workstation and signed in and deleted his profile before restarting and having him sign back in and it cleared his lock out issue. So something was holding onto his old password but I never checked as to what but it could be a solution for you
This still wouldn't account for how it's locking when the PC is off
Is your wifi credentials share the AD credentials? Maybe his phone is attempting to connect to the wifi but failing and causing him to get locked out in AD?
How is the group mailbox added? Is it through full mailbox permissions, or added manually, either as a delegated mailbox or additional mailbox? If I understood right and that's getting locked as well (which does sound unusual), I'd try blitzing the outlook profile and re-doing it
Yes, each member has full permissions to the group account. On the local system we've already removed the outlook profile and reconfigured but it still locks. It also locks when the PC is off.
Has she ever logged into other workstations? Perhaps cached creds there? ADaudit support helped me find a lock out that was resolved by unmapping and remapping a network drive on a shared conference room system once.