Re: 2 users getting locked out repeatedly

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

anonymous_at_discussions.microsoft.com
Date: 07/02/04 

Date: Fri, 2 Jul 2004 05:08:32 -0700

Thanks, I will check out this tool, never can have too
many of those.

>-----Original Message-----
>Most likely the users are logged into other workstations
or servers
>unknowingly, so when they changed their passwords, those
other workstations
>can no longer authenticate them and locks em instead.
The DC security log
>should tell you where the login failures are coming
from, just reboot those
>machines when you find them. There is also a package
called ALTools you can
>download from MS that can be used to diagnose account
lockouts.
>
>"Jeff Ferrell" <anonymous@discussions.microsoft.com>
wrote in message
>news:22aac01c45ddb$377fa630$a301280a@phx.gbl...
>> Greetings all,
>>
>> I have a strange situation. I have 2 users only of
about
>> 75 that keep getting their accounted locked out.
Happens
>> every day, typically after 4-5 hours of working atleast
>> or so it seems. They don't have bad password attempts,
I
>> have tried to reset the account, expire the pwd and
>> change it, then the user would create a new password
and
>> the following day at some point, while working, it
would
>> lock her account.
>>
>> It is a Win2000 network, 3 DC's, 1 of which is across a
>> T1 link. Both users are in the same OU. No one else in
>> that OU has issues, nor across the entire
organization. 2
>> servers including the PDC are at SP4, the one across
the
>> WAN link is at SP3. One person is typically only at one
>> computer while the other is often at 2 at the same
time.
>>
>> Any ideas what could be going on? The event logs seem
>> fine, no errors. She also mentioned this all started
up 2
>> months ago after her password had expired.
>>
>> As I type this, she mentioned it locked her out. I
>> searched the entire Event Viewer logs and only found
her
>> account referenced for printing. This time she did
>> deliberatly put her password wrong 1 time, with 5 being
>> the point before lock out.
>>
>
>
>.
>

Relevant Pages

  • Re: 2 users getting locked out repeatedly
    ... Most likely the users are logged into other workstations or servers ... download from MS that can be used to diagnose account lockouts. ... The event logs seem ...
    (microsoft.public.win2000.active_directory)
  • Re: Administrator Account Locking Out
    ... the Administrator account, or possibly our RADIUS server might be using it ... 2003 Servers and Windows 2000 servers. ... I have looked in both the event logs, turned on netlogon logging, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reading Security Event Logs with Service Account
    ... the right pane will be Manage auditing and security log. ... then set that in the GPO for the OU where the servers are. ... Add the user account to that group afterwards. ... logs on Windows servers. ...
    (microsoft.public.windows.server.security)
  • Re: Incoming mail for recipients not in my domain
    ... Looking through the logs I can't see any ... and there should be a user field that you can see the account used. ... If you have to do that, you will need to check your servers ... >> problem because all of the Exchange services run under the Local System ...
    (microsoft.public.exchange2000.admin)
  • RE: Windows 2000 user login
    ... > My issue is that a user's account keeps getting locked out due to an ... > where or how many Windows 2000 servers or workstations a user is logged ... > My thinking is that he's logged into multiple machines under an old ...
    (Security-Basics)