User account problem

Kryten · Guest

Hi,
I look after a Win 2003 SP2 IIS ADAM box that's giving a seemingly
strange problem that I'd appreciate a steer with if possible.

The box is dedicated to running a single web with a back end sybase
database. Sometimes users on browsing to the web get a strange "web
service has failed to execute" message and the http session ends. The
box gets rebooted and all is well again..for a few days.

When this happens the only thing I can see in the logfiles is in the
system log Event ID 10004 DCOM errors saying that a certain account
could not log in as it was locked out. The user account referenced is
the main functional account for the web application and I can log into
the box as this account no problem at all.

Are there any tools out there that will log which accounts are logging
in/out of this box in a realtime or close to realtime way? I wanted to
see if this account was getting screwed up somehow.

I'd be grateful for any advice on how to approach this problem. My
knowledge is more centred on the web application itself than the OS/
IIS/AD areas.

Many thanks,
K