Hello,
I hope I am typing this in the right forum. I am in need of some help. A user recently received an iPad and has the company mail setup on her device. I didn't set her device up, so I may not know the exact details of her configuration.
She keeps getting locked out daily and I only assist in problems like this with another person who knows a lot more than me. We are running windows server 2003, with exchange 03, and IIS 7.0. I can provide her login failure event ID report here:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 539
Date: 4/8/2013
Time: 1:44:54 PM
User: NT AUTHORITY\SYSTEM
Computer: mailservername
Description:
Logon Failure:
Reason: Account locked out
User Name: useraccountname
Domain: domainname
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: mailservername
Caller User Name: mailservername$
Caller Domain: domainname
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 2480
Transited Services: -
Source Network Address: 192.xxx.x.xxx
Source Port: 49235
This report also showed up right after:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 539
Date: 4/8/2013
Time: 1:44:54 PM
User: NT AUTHORITY\SYSTEM
Computer: mailserver
Description:
Logon Failure:
Reason: Account locked out
User Name: useraccountname
Domain: domainname
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: mailservername
Caller User Name: mailservername$
Caller Domain: domainname
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 2480
Transited Services: -
Source Network Address: 192.xxx.x.xxx
Source Port: 49233
Please let me know if anyone can help. I'm not an expert and only learning, so I may need sometime to understand your answer. I am happy to provide any direction in which may help you assist me.
Thanks,
-S