Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Windows 10 Lots of ID 4648 in Event Viewer

Hello,
I have a computer that is not a member of a Windows domain and I access a folder on the file server through a shortcut and username defined in Active Directory. When I check the Event Viewer, there are a lot of ID 4648 and the username is locked in Active Directory:

https://i.postimg.cc/Kz43gnRF/PIC13.png

I unlock the username, but it gets locked again. I also checked the logs for runas.exe, but found nothing.

How do I find the problem?

Thank you.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by syan722438Jan 9, 2018 02:05 PM 2 239 Jan 9, 2018 02:05 PM
Last Post: syan722438
by 5chn4ppFeb 12, 2016 07:28 AM 7 165 Feb 12, 2016 07:28 AM
Last Post: 5chn4pp
by ZuGgYMay 4, 2015 11:31 PM 17 736 May 4, 2015 11:31 PM
Last Post: #Skyline