BESAdmin Account Lockout
 

Hello again, another BES issue!

Our BESAdmin account keeps getting locked out. I have checked all the BES services have the correct password and they have. Is there anything else that could be causing this?

I have just disabled IPV6 on the NIC as I have read that this could cause it.

It happens at random times of the day, for example, it happened at 01:49am this morning when nobody was logged on.

Any advice?

Thanks. :oops:

Re: BESAdmin Account Lockout
 

Check task 3 as well as the rest of the KB :
KB02276-Assigning service account permissions for a BlackBerry Enterprise Server for Microsoft Exchange

Re: BESAdmin Account Lockout
 

Thanks for the response, all is set correctly with the local permissions.

Re: BESAdmin Account Lockout
 

Have you checked the Windows security log to see what happened at 1:49 am?

Re: BESAdmin Account Lockout
 

What exactly do you mean by locked out? Can't logon? Services stop?

Re: BESAdmin Account Lockout
 

The BESAdmin service is locked out, meaning no network access. As in 3 incorrect passwords entered so is locked out of the domain.

Once the account gets locked out BES users mailboxes fail to initialise.

Re: BESAdmin Account Lockout
 

Again: have you checked the Windows security log?

Re: BESAdmin Account Lockout
 

I've just checked now and it looks like a robot is trying to access our network from our TS server. There are lots of random usernames such as Scan and Scanner etc and one of them is BESAdmin.

I'll get onto this now.

Thanks for the help.

Re: BESAdmin Account Lockout
 

Cool, that's what I suspected. Try to locate and kill that bot as soon as possible.

Re: BESAdmin Account Lockout
 

Certainly will! It is trying to access from a TS located on one of our other sites and therefore authenticating against a different DC than the ones I was looking at originally.