Skip to main content
AD Academy
Back to all events
4767SecurityAccountsINFOLast updated:

Account was unlocked

What it means

Someone manually unlocked an account. Worth knowing who — especially for privileged accounts.

First steps

  1. 1Check who did it (Subject) and whether they should have.
  2. 2If it locks again within minutes, the stale-password source is the real problem.

Related events

This reference is a starting point for investigation, not a replacement for your organisation's security policy.