How to determine what is causing account lockup in Windows 10


  1. Posts : 6
    Windows 10 Professional
       #1

    How to determine what is causing account lockup in Windows 10


    I am using Windows 10 professional version 20H2 Build 19042.1237. After a week or two I am consistently getting locked out of my network logon. I do not get anywhere near the incorrect tries on my password. I am trying to determine if there is a service or hacking attempts on my PC. I noticed an Event ID 5061 system integrity, at the time I was locked out. What are some troubleshooting suggestions?

    Thanks!
      My Computer


  2. Posts : 2,800
    Windows 7 Pro
       #2

    Hi,

    First thing to do is, to Enable "Audit Logon Events" policy

    Then you will be able to use Event Viewer to find the source of failed logon events.

    After that, some other dispositions could be required depending on the source of the error.
      My Computers


  3. Posts : 13,895
    Win10 Version 22H2 Pro and Home, Win11 Pro and Home
       #3

    Also might be good to know if the computer is connecting to the Router/Modem via Ethernet or Wireless/Wi-Fi.
    Event ID 5061 system integrity at DuckDuckGo
      My Computers


  4. Posts : 16,781
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       #4

    Terry1337 said:
    … account lockup ...
    Terry1337 said:
    ... locked out of my network logon ...
    Terry,

    In order to avoid misunderstandings, please would you explain just what it is that you are locked out of.

    All the best,
    Denis
      My Computer


  5. Posts : 6
    Windows 10 Professional
    Thread Starter
       #5

    Domain account lockup


    My domain account is being locked up.
      My Computer


  6. Posts : 2,800
    Windows 7 Pro
       #6

    Hi Terry,

    Have you enabled "Audit Logon Events" policy ?

    If you are the manager of this domain please apply the gpo to all your domain from Policy Editor console on your Domain Master. And force policies application.

    You should have events comming in real soon, if someone is trying a brute force attack on some of your accounts.
      My Computers


  7. Posts : 6
    Windows 10 Professional
    Thread Starter
       #7

    I applied Audit Account Logon events under default domain policy. Where will I find the log file?
      My Computer


  8. Posts : 890
    10 Pro/11 Pro Dual Boot
       #8

    Terry1337 said:
    I applied Audit Account Logon events under default domain policy. Where will I find the log file?

    look in event viewer
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:22.
Find Us




Windows 10 Forums