Wednesday, September 18, 2013

How can I find out why specific AD accounts are being locked daily?

I usually have luck doing it this way:
  1. Run LockoutStatus.exe.
  2. Enter the username and find out which of your DCs was the source of the lock ("Orig Lock" column) and when it happened ("Lockout Time" column).
  3. Examine the Security log on the DC at that time and you will usually be able to pinpoint it to a specific machine.
  4. Once you have the machine it's usually:
    • User has a scheduled task running in their name and their password has changed.
    • User has a disconnected RDP session.
Read More ->>

Tuesday, September 10, 2013

Event ID 1071 — Terminal Server Connections

Resolve

Configure the terminal server to allow connections

To resolve this issue, configure the terminal server to allow connections by using the chglogon command-line tool.
To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.
To allow connections:
  1. On the terminal server, open an elevated Command Prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. In the elevated Command Prompt window, type chglogon /enable, and then press ENTER.

Verify

To verify that connections to the terminal server are working properly, establish a remote session with the terminal server.
Read More ->>

How to change password on Citrix License Server

1) Open the "server.xml" file in C:\Program Files\Citrix\Licensing\LS\conf. If on Win2k8 you will need to open your editor as an admin.
2) Find the entry that looks something like this:
<user firstName="System" id="admin" lastName="Administrator" password="(ENC-01)UaFz17cJ2oNQ+LkskjkzUyVV5ZcmaoJCDCiuiusbB6zk2P0uR" passwordExpired="false" privileges="admin"/>;

3) Erase the contents between the double quotes after "password="
4) Enter a plaintext password so it looks like this: password="test"
5) Change the passwordExpired value to be "true"
6) Save the server.xml file.
7) Restart the licensing services. I also closed and re-opened the LAC but this may not be necessary.
8) Log into the LAC using user name "admin" and the password you set.
9) You will be prompted to change your password. Do it. By doing it, the new password will be encrypted in the server.xml file.
10) To check that everything is working as planned, re-open the server.xml to check that the password is now encrypted.
Read More ->>