SQL service accounts keep getting locked out in AD. I have to unlock them everytime.
What could be the probable cause and a solution?
6
-
Can you got to that server and check into event log to see why this is happening– Amit KothaCommented Oct 31, 2016 at 15:13
-
Is it SQL account or Windows Account for SQL Service? is it bring down the sql server?– Waqas Sarwar MVP ♦Commented Oct 31, 2016 at 15:51
-
How often is this happening? If it happens at the same time every day, then a script or console app could be running using the wrong credentials for the service account and using those credentials incorrectly enough to lock the account.– James GrizzleCommented Oct 31, 2016 at 18:39
-
Eventlog only tells me it's a logon failure. I've updated the password both in services, and sql config manager just to be certain. @WaqasSarwarMCSE they are not sql accounts, but windows account. and yes it does bring the server down unless I unlocked the service acct and restart the services.– dkorraCommented Oct 31, 2016 at 19:07
-
@JamesGrizzle it happens almost everytime. But I can't figure out what app or script is using wrong credentials. Thank you.– dkorraCommented Oct 31, 2016 at 19:08
|
Show 1 more comment
2 Answers
You can do troubleshooting by looking in Windows eventviewer. There is a category "Security". Please look for the Keywords Audit Failure.
You might also use the tool Lockout Status to get more information how often a bad password is provided and when locking occurs.
-
Thank you, Now I can see the Lockout Status but still can't figure out why it keeps locking or which app is using a wrong credential.– dkorraCommented Oct 31, 2016 at 19:10
looks like you have a service account with wrong password somewhere. Its obviously trying more than three times and getting locked out.
You need to find out where that service account is being used and change its password as it could be using an old password. An example would be me creating some custom code and using the SQL service account that has hard coded username and password in the SQL string.
