Skip to content
rakhesh.com

rakhesh.com

rakhesh sasidharan's mostly techie oh-so-purpley blog

  • Home
  • About
  • Quotes
  • Credits
  • Changelog
  • GitHub
  • Twitter
  • LinkedIn
  • Mastodon

Search

Subscribe via Feed

RSS | JSON

Categories

  • Asides (106)
  • Azure, Azure AD, Graph, M365 (127)
  • Books, Audiobooks, Podcasts (43)
  • Citrix (62)
  • Coding (27)
  • Docker (20)
  • Exchange, Exchange Online (42)
  • Gadgets (65)
  • Infrastructure (102)
  • Linux & BSD (61)
  • Mac (43)
  • Musings (50)
  • Networks (43)
  • Power Platform (15)
  • PowerShell (111)
  • TV, Movies, Music (66)
  • Virtualization (108)
  • Windows (270)
  • WordPress (9)

[Aside] Finding the source of a domain account lockout

An excellent post. Easy and to the point. Wish I had discovered this much before. The upshot is:

  • Enable debugging on a domain controller: nltest /dbflag:0x2080ffff
  • Disable debugging after a bit: nltest /dbflag:0x0
  • Check the logs at %windir%\debug\netlogon.log to find out where/ what is locking the account.
Posted on October 9, 2017October 9, 2017Author rakheshCategories Asides, Windows

Post navigation

Previous Previous post: [Aside] NetScaler and WireShark
Next Next post: MSI, MST, and disabling auto-healing/ self-repair/ “please wait while Windows configures” messages for certain applications