Re: Account Lockout Problems

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: John Negus (jnegus_at_mask.msetechnology.com)
Date: 11/18/04 

Date: Thu, 18 Nov 2004 12:01:07 -0500

Hello Randy,

What OS are you using, Windows 2000 or Windows 2003?

There is a known problem with Windows 2000 where a user or app stores
authorization credentials locally, but, then the user changes their
password and does not update the stored information.

When they next try to connect to the resource a badly written app
instead of timing out and prompting the user to enter the correct
credentials will keep presenting the incorrect credentials causing the
user account to become locked out.

This has been address within Windows Server 2003

I am not sure if this relates to your problem based on the information
included in your post but I hope this helps. 

-- 
John Negus
MSEtechnology
--
"aubuchonz" <aubuchonz@discussions.microsoft.com> wrote in message 
news:1010CD72-4EE6-4828-8257-41BF679D6F09@microsoft.com...
>
> I am haveing some account lockout problems I can't seem to figure out. 
> I
> have read the technet article
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx.
> I have installed ALockout.dll and have netlogon logging.  The Logs 
> don't
> make any sense to me.  The netlogon logs is nothing but mailslot 
> entries.
> ALockout logs seem to list process when the lockout occurs but which 
> ones are
> important.  I see MS office entries and Lotus notes entries.  The only 
> thing
> these workstations have in common is they map to exteral domain drives 
> with a
> password.  I did clear reoccuring drives.  Thanks if this is not the 
> right
> group for my question please point me in the right direction.  Thanks 
> in
> advance, I find this forum very helpful.
>
> -- 
> Randy AuBuchon MCSE 2000 CISSP

Relevant Pages

  • RE: synchronizing domain user Local cached credentials with domain
    ... Would you mind emailing me your script? ... windows taskbar bubble which would indicate that their password needs to be ... locally cached credentials are out of sync with domain credentials. ...
    (microsoft.public.windowsxp.security_admin)
  • Cached Password Issue???
    ... cannot browse the server. ... shares if I supply the same credentials however. ... Windows cannot query for the list of Group Policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with control hosted in IE
    ... The control is running on the client machine, so the default credentials are ... These will be the Windows logon from the ... > I logon to another machine using a local account (not one that the IIS ...
    (microsoft.public.dotnet.security)
  • WindowsTokenRoleProvider Anyone?
    ... Hey All, I'm attempting to put together a "secure" ASP.NET 2.0 application with one requirement that has given me a bit of grief: In a nutshell, if the user's session expires then they should be forced to re-authenticate with the application by providing logon credentials. ... the easy way to implement security with domain users is to use the Windows Authentication model built in to ASP.NET. ... to have the programmatic control over the authentication mechanism seems to leave only one choice in this scenario: ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Network isolation: local logins ?
    ... Regarding the local user accounts, in Windows XP and Windows 2003, if the ... secured/isolation network using its configured IPsec-based authentication ... The credentials of the user are not evaluated when determining ... IP extends the core IKE functionality of machine authentication to also ...
    (microsoft.public.windows.server.networking)