All domain Accounts being locked out

Alasdair · External Since: Jan 08, 2009 Posts: 1

Hi,

On one of my 2000 Domains, all accounts are being locked out.
If I unlock an account, it will be locked again within a few minutes, even
an account that no-one or nothing uses.

I have lots of errors like

Authentication Ticket Request Failed:
User Name: ASPNET
Supplied Realm Name: xxx.yyy.com
Service Name: krbtgt/xxx.yyy.com
Ticket Options: 0x40810010
Failure Code: 0x6
Client Address: 192.168.30.97

Anteaus · External Since: Jan 10, 2009 Posts: 1

This may be the clue:
> User Name: ASPNET

Sounds like a webserver process is trying to log-on as this user.
Might be faulty website coding, or might be an intrusion-attempt.

"Alasdair" wrote:

> Hi,
>
> On one of my 2000 Domains, all accounts are being locked out.
> If I unlock an account, it will be locked again within a few minutes, even
> an account that no-one or nothing uses.
>
>
> I have lots of errors like
>
> Authentication Ticket Request Failed:
> User Name: ASPNET
> Supplied Realm Name: xxx.yyy.com
> Service Name: krbtgt/xxx.yyy.com
> Ticket Options: 0x40810010
> Failure Code: 0x6
> Client Address: 192.168.30.97
>
>