The Zimbra mail server (version 8.6) is connected to an active directory controller operating under Windows 2008 R2. The passwords on both servers are synchronized.
For several days there is a problem with several users. Their accounts are blocked every few seconds. In the event log on Windows Server you can see that the mail server is constantly trying to log in to the account but gives the wrong password which after three unsuccessful attempts blocks the user in the mail and in the domain.
Both servers have been restarted several times, but nothing has been done.
This situation occurs only in five people. The rest of users do not have this problem.
I will add that these users, even if they do not try to log in to the mail, are also blocked.
What could be the reason?
Could the server have been infected with malware?
Maybe a script asking about these users has been installed?
- Zimbra Collaboration 8.6 Patch 9 now available (includes fix for CVE-2017-8802). Read the announcement.
- Zimbra Collaboration 8.8.7 + Zimbra Connector for Outlook 8.8.7 are available.. Read the announcement.
- Are you a Zimbra Developer? You can find some interesting stuff in our Official GitHub: https://github.com/Zimbra and check the Community Projects too: https://github.com/Zimbra-Community/
Discuss your pilot or production implementation with other Zimbra admins or our engineers.
1 post • Page 1 of 1
Who is online
Users browsing this forum: No registered users and 18 guests