User account problem

[Guest Kryten]

Hi,

I look after a Win 2003 SP2 IIS ADAM box that's giving a seemingly

strange problem that I'd appreciate a steer with if possible.

 

The box is dedicated to running a single web with a back end sybase

database. Sometimes users on browsing to the web get a strange "web

service has failed to execute" message and the http session ends. The

box gets rebooted and all is well again..for a few days.

 

When this happens the only thing I can see in the logfiles is in the

system log Event ID 10004 DCOM errors saying that a certain account

could not log in as it was locked out. The user account referenced is

the main functional account for the web application and I can log into

the box as this account no problem at all.

 

Are there any tools out there that will log which accounts are logging

in/out of this box in a realtime or close to realtime way? I wanted to

see if this account was getting screwed up somehow.

 

I'd be grateful for any advice on how to approach this problem. My

knowledge is more centred on the web application itself than the OS/

IIS/AD areas.

 

Many thanks,

K