Network Management

Account is locked out due to UDT polling

Windows account is being reported to be polling active directory and getting locked up if the credential password is incorrect.

First published date

11/9/2018 9:50 AM

Last published date

5/3/2022 3:23 PM

Overview

The WindowsActive Directory account is getting locked due to UDT Polling.

The following are the common symptoms for this issue:

  • The account is attempting authentication every 30 minutes.

Product section

User Device Tracker

Cause

UDT tracks user activity by reading an event log on the AD domain controller. Reading that log requires, UDT to have the Event LogReader permission on each AD controller through which it is tracking user activity. This account either has incorrect permissions or a bad password

Resolution


Resolution 1:
  1. Click Manage Active Directory Administrator Credentials in the UDT Credentials area inUDTSettings (Settings > UDT Settings).
  2. Edit the Credential Name that is being locked out and set the correct password.
  3. Add the LogReader permission for this account on the Domain Controller.
  4. If the above does not resolve the issue you can delete the account from UDT Credentials.
    Note: You may need to replace the SDF files (see Diagnostics - When to repair SDF files in Orion Platform) after deleting the account or updating the password.

Please refer to Adding Active Directory Controllers and Users for more information.

Resolution 2:
 

  1. Go to All Settings > Manage UDT Domain Controllers
  2. Check the credentials assigned to Domain Controllers
  3. You have an option to put the correct credentials or edit domain controller then disable UDT polling 
  4. Go to All Settings > UDT settings > Manage UDT credentials
  5. When domain controllers are dis-associated with the faulty credentials, the option in deleting credentials should now be clickable.