Forum Discussion
csangalli01
May 08, 2023Copper Contributor
Domains administrator locked out
 Dear all,  today, out of the blue, I started to receive hundreds of alert about our domains Administrator failed logon and account locked out.  We have 5 domains in the same forest and each DOMAIN\ad...
- Sep 07, 2023This is just an update for explaining what was the issue.
 We realized that the issue was due to brute force attacks on all our firewalls.
 These attempts also used the account "administrator" and this leaded to account lock-out due too many attempts.
 So we configured a limit on consecutive attempts and a lockout time before retrying... it's not a full fix, but it limited a lot the issue.
csangalli01
Sep 07, 2023Copper Contributor
This is just an update for explaining what was the issue.
We realized that the issue was due to brute force attacks on all our firewalls.
These attempts also used the account "administrator" and this leaded to account lock-out due too many attempts.
So we configured a limit on consecutive attempts and a lockout time before retrying... it's not a full fix, but it limited a lot the issue.
We realized that the issue was due to brute force attacks on all our firewalls.
These attempts also used the account "administrator" and this leaded to account lock-out due too many attempts.
So we configured a limit on consecutive attempts and a lockout time before retrying... it's not a full fix, but it limited a lot the issue.