[求助]AD帐号自动被锁

Rluo

AD帐号老是自动被锁， 信息如下：请大家帮助看看是什么问题。<br>
<br>
多谢！<br>
<br>
<IMG onmouseover="javascript:if(this.width>520)this.width=520;" src="../leadbbsfile/fileType/jpg.gif" onload="javascript:if(this.width>520)this.width=520;" align=absmiddle border=0>此主题相关图片<br>
<IMG onmouseover="javascript:if(this.width>520)this.width=520;" style="CURSOR: hand" onclick=javascript:window.open(this.src); src="../leadbbsfile/upload/2005/04/12/100144.jpg" onload="javascript:if(this.width>520)this.width=520;" align=absmiddle border=0><br>
<br>
<br>

jia_william

看一下系统策略中，是否设置了：N次登录失败，自动锁定帐号？

Rluo

我都已经将此策略取消了还是这样的问题

nichol

是否还没有刷新组策略！！

Rluo

我现在还是要被锁住阿，在微软网站上提示说是感染病毒：<br>
SYMPTOMS<br>
<br>
Users on your network may unexpectedly have their user accounts locked. This behavior occurs even though users have not previously tried to log on and have not typed any incorrect user names or passwords. When this behavior occurs, the following event is recorded in the event log on Microsoft Windows Server 2003-based computers:<br>
<br>
Event Type: Error <br>
Event Source: SAM <br>
Event Category: None <br>
Event ID: 12294 <br>
Date: <br>
Time: <br>
User: <br>
Computer: <br>
Description: The SAM database was unable to lockout the account of due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above. <br>
<br>
<br>Back to the top<br><br>
<br>
CAUSE<br>
<br>
This issue may occur when a computer on your network is infected with the W32.Randex.F worm or with a variant of it. <br>
<br>
<br>Back to the top<br><br>
<br>
RESOLUTION<br>
<br>
To resolve this issue, run a complete virus scan on your network using the latest available virus definitions. Use the scan to remove the W32.Randex.F worm. For information about how to perform a virus scan or how to obtain the latest virus definitions, see your antivirus software documentation, or contact the manufacturer.<br>
<br>
For additional information about how to contact the manufacturer of your antivirus program, click the following article number to view the article in the Microsoft Knowledge Base: <br>
<br><br>
<br>

Rluo

但是我一直都杀不到毒阿，请大家给我想想办法

jackyqxl

关注中。。。。。。。。。。。。。

85501188

肯定是病毒造成的，检查一下进程中有没有可疑的进程吧