Why Active Directory account gets repeatedly locked when polling AD resources?
Q: When I monitor Active Directory resources, account used periodically gets locked. Why this is happening and how to avoid that?
A: Active Directory (domain) is often configured to lock the account after several unsuccessful login attempts. Most probable reason for account lockup is its changed password. If password has been modified at Active Directory (domain), but change had not been applied in monitor settings, account might get locked after several polling attempts.
Note: it is strongly recommended to create least privileged AD account to be used in monitoring. That’s better from both maintenance efforts and security point of view.
Related Topics:
How can IPHost Network Monitor help me for server performance tuning?
How could all the important data be gathered to set up Windows Server monitoring?
