Hi Folks, One of our user account is getting locked frequently.As per our domain policy after 3 invalid attempts the id will get locked.We have checked the domain controller event logs.In the security logs, i can see lot of messages like these 644,AUDIT SUCCESS,Security,Fri Aug 08 11:24:21 2003,\Everyone,User Account Locked Out: Target Account Name: trng1 Target Account ID: %{S-1-5-21-1178368992-402679808-390482200-39625} Caller Machine Name: WPILOT Caller User Name: $ Caller Domain: Caller Logon ID: (0x0,0x3E7) 681,AUDIT FAILURE,Security,Fri Aug 08 11:24:21 2003,NT AUTHORITY\SYSTEM,The logon to account: trng1 by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 from workstation: WPILOT failed. The error code was: 3221226036 I doubt, it is b'coz of this the acct is getting locked.B'coz trng-1 is the user's account id Anybody can help me in this ???

That particular error message is due to the user trying to logon with the account locked out. Check the following Link to microsoft's knowledge base to see more info. The first link (Description of Security Event 681) at gives the error codes. Start simple....first verify the user isn't messing up the password enough times to get locked out. Usually these situations are caused by user fault (ie: inept user forgetting password or mistyping it...etc)....not software faults.

I have already checked with the user,The account is getting locked without entering his id/password.I hope that some process is locking his account.But, i have checked all the services.No service is running with his id...the above shown are the error messages, iam getting in the DC's security logs.And any idea about this MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 ???