HI All, we have 6 node Always on AG groups in sql server 2014.
HI All,
we have 6 node Always on AG groups in sql server 2014. service account that of sql getting locked every minute.
The Security System detected an authentication error for the server MSSQLSvc/MSRJ.abc.net:5022. The failure code from authentication protocol Kerberos was "The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested.
replicas also removed from AG .
could you please what is the issue . ?
Thanks
Raghu
Replies
sorry mistakely pressed send button.
continued... below
As best practice we should use separate service account for SQL services n the option 'never expires' should be selected for it.....
Right.
System level file can be deleted directly. Once enable all the services to automatic mode
Delete the user account from master admin login after taking backup. Then recreat it again. Problem will bebsolved
Ila Maggio Hi raghu, Recently i faced my AD account lockout issue would like to share the experience. i am not sure it will be the resolution but may help you to somewhat troubleshoot. similarly My AD account was locking out frequently every 15mins or you can say when i was using my credentials for any rdp, login ,logoff of my laptop. This started since when i changed my 3 password for AD account as per policy after 90 days.With the help of AD team i was able to found the server which was casuing problem to lockout issue . Then i statred to trouble shoot where my credentials are saved on that server for eg. are any services running under my AD account like sql agent
every AD PROIFLE or windows login will have user profile created in C drive under windows\ users. my AD account user profile was deleted n every profile will have registry key mapped under regedit in my case which was mapped with old password casuing account lockout issue and not able create new key with same username.after deletion of old registry key my AD account lockout issue resolved.In your case its service account service accounts password should be set not to expire but you said password changed i expecting same issue. hope this will help you get some information to resolve issue.😊
As it clearly states, the account gets unlocked due to invalid PWD attempts, was password of the account changed recently? If it was changed, then check if right password is used for the services using this account.
Celia Muller thank you
we got this AG dash borad
Zaker Ali i didnt get you , can u please elaborate more
