AD Find Calling Computer For Locked Account

 

Kennedy Krieger Knowledge Base Article

For Internal Use Only




 

Version

Description of Change 

Author

Approved By

Date

1.0 

AD Find Calling Computer For Locked Account

Staci Hack

Staci Hack

Date

 

 

Confidentiality Statement

This document is produced for Kennedy Krieger and cannot be reproduced or distributed to any third party without prior written consent. No part of this document may be modified, deleted, or expanded by any process or means without prior written permission from Kennedy Krieger.

 


 

 

Contents

 

1.   Purpose 1

2.   Instructions 1

 

  1. Open the Account Lockout Status Tool.

 

 

 

  1. Click on the File menu.

 

 

 

  1. Click Select Target

 

 

 

  1. Type in the username.

 

 

 

  1. Click OK.

 

 

 

  1. Open Event Viewer on your computer with your admin account.

 

 

  1. Right click on Event Viewer (Local).

 

 

 

  1. Click Connect to Another Computer.

 

 

 

  1. Type in the name of one of the DCs showing the lockout.

 

 

  1. Click OK.

 

 

 

  1. Expand Windows Logs.

 

 

 

 

 

  1. Click on Security.

 

 

 

  1. Right click on security.

 

 

 

 

  1. Click Filter Current Log.

 

 

 

  1. Type in 4740 for the Event ID.

 

 

 

 

  1. Click OK.

 

 

 

  1. Scroll through the events looking for the username in the Security ID field.

 

 

  1. You will see the Caller Computer Name.
  2. Connect to the Caller computer and sign the user out or reboot that machine.