AD Account are being locked but only some are showing as 4740 in Domain controller
Super User Asked by Honk on December 1, 2021
We have been seeing increasing number of AD Account lockouts.
Some of these lockouts show up in event viewer as 4740 events but most do not show up at all. My account has been locked out almost once a day, there is never a 4740 event associated with it. However, if I try to login in with a bad password eg:BadPwd123 till my account is locked out, I see the 4740 in eventviewer.
Are there other event lockouts other than 4740 That I can be searching for?
I have already enabled
Computer Configuration -> Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> Audit Policies->
Add your own answers!
Ask a Question
Get help from others!
Recent Questions
- How can I transform graph image into a tikzpicture LaTeX code?
- How Do I Get The Ifruit App Off Of Gta 5 / Grand Theft Auto 5
- Iv’e designed a space elevator using a series of lasers. do you know anybody i could submit the designs too that could manufacture the concept and put it to use
- Need help finding a book. Female OP protagonist, magic
- Why is the WWF pending games (“Your turn”) area replaced w/ a column of “Bonus & Reward”gift boxes?
Recent Answers
- Lex on Does Google Analytics track 404 page responses as valid page views?
- Jon Church on Why fry rice before boiling?
- haakon.io on Why fry rice before boiling?
- Peter Machado on Why fry rice before boiling?
- Joshua Engel on Why fry rice before boiling?