[ChrisCasey]

Hello again, another BES issue!

Our BESAdmin account keeps getting locked out. I have checked all the BES services have the correct password and they have. Is there anything else that could be causing this?

I have just disabled IPV6 on the NIC as I have read that this could cause it.

It happens at random times of the day, for example, it happened at 01:49am this morning when nobody was logged on.

Any advice?

Thanks.

[fadmin]

Check task 3 as well as the rest of the KB :
KB02276-Assigning service account permissions for a BlackBerry Enterprise Server for Microsoft Exchange

[ChrisCasey]

Thanks for the response, all is set correctly with the local permissions.

[freakinvibe]

Have you checked the Windows security log to see what happened at 1:49 am?

[fadmin]

Originally Posted by ChrisCasey

Our BESAdmin account keeps getting locked out.

Thanks.

What exactly do you mean by locked out? Can't logon? Services stop?

[ChrisCasey]

The BESAdmin service is locked out, meaning no network access. As in 3 incorrect passwords entered so is locked out of the domain.

Once the account gets locked out BES users mailboxes fail to initialise.

[freakinvibe]

Again: have you checked the Windows security log?

[ChrisCasey]

I've just checked now and it looks like a robot is trying to access our network from our TS server. There are lots of random usernames such as Scan and Scanner etc and one of them is BESAdmin.

I'll get onto this now.

Thanks for the help.

[freakinvibe]

Cool, that's what I suspected. Try to locate and kill that bot as soon as possible.

[ChrisCasey]

Certainly will! It is trying to access from a TS located on one of our other sites and therefore authenticating against a different DC than the ones I was looking at originally.