i'm a new server admin, i'm not certified yet, i'm studying to do it soon, i ran the event comb to check what is locking a users account, the result is a DC, i did RPD to the DC, but not sure how to use the event viewer to determine what is locking the account, i need help really fast, the case is old, and my boss wants to killme already :P this is exchange 2010, the DC is hosted in ws 2008

This really isn't an Exchange Server question, and you've posted in an Exchange Server forum. Well, the real answer is your account lockout policy. If you don't have an account lockout policy, nothing would be locking out accounts. All kinds of things can trigger your account lockout policy, such as hacking. Mobile devices that repeatedly try to log in with an old password can do it. So can any number of other apps that try to log in.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

sorry i wasn't sure where to post it, but how can i use event viewer to check account lockouts?

you have to check DC event log for event id 4771 and 4740 Remigiusz ExchangeBlog

Account Lockout and Management Tools http://www.microsoft.com/en-us/download/details.aspx?id=18465 Finding cause of locked-out Active Directory Accounts http://blog.chrisconklin.com/?p=84 List down all locked user accounts in Active Directory http://www.doitfixit.com/index.php?option=com_content&view=article&id=110:locked-accountlistactive-directoryserver-2008query&catid=48:active-directory&Itemid=53

Yes, very useful links above. If you use EventCombMT.exe, that should be able to show you the locked out user and the computer at which they were locked out. I think (will have to double-check) that if it is Exchange related (mobile device trying to log in) the computer shown would be the mail server (probably CAS) trying to authenticate that connection attempt. But *what* is actually causing the lockouts will require some more investigation. If you can determine user(s) and device(s) that will get you started.Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Hello, Yes. Your issue is not related to Exchange 2010. If the Damitha Anuradha and Le Pivert's replies can't answer your issue. I suggest you post your issue to windows server forum. http://social.technet.microsoft.com/Forums/en-US/winserverDS/threadsCara Chen TechNet Community Support