Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Account lockouts are displayed with delay
KB1547 | Last review: Apr 08, 2013 | Netwrix Account Lockout Examiner | 4.0 and above
|Symptoms||It takes a long time for account lockouts to be reflected in NetWrix Account Lockout Examiner.|
|Cause||This can happen if the product is set to monitor the Primary Domain Controller (PDC) only. If an account gets locked on a different domain controller, it takes time for the lockout event to replicate to the PDC, and this causes the delay.
Another possible reason is very high activity in your domain that generates more events per second than the product can handle. As a result an event queue and a delay occurs .
To fix the issue, set the product to monitor all DCs in the monitored domain and change event processing method.
To change to All DCs mode this, perform the following steps:
Was this information helpful?