Re: Lockout of all acounts

From: *Vanguard* (no-email_at_bogus.nix)
Date: 02/02/04 

Date: Sun, 1 Feb 2004 19:05:22 -0600

"Greg Edmonds" said in
news:27009FF7-BCA5-46FA-9AF7-868FBFD327D1@microsoft.com:
> Hi Everyone,
>
> We have a Windows 2000 single domain and have found that all our
> accounts, including Administrator, have been locked out. We only
> have a single domain controller and cannot get console access. Is
> there a way of unlocking these accounts? Can you please get back
> urgently on this matter?
>
> Thanks in advance,
>
> Greg

Without getting into suggesting doing a Google search on password crackers
or getting Locksmith from WinInternals, does maybe your lockout policy
expire after, say, 30 minutes? That is, is the lockout from repeated failed
login attempts and you have group/local policy configured to lockout the
account after N bad login attempts and the lockout lasts X minutes? I don't
know if there is a default for N bad login attempts; when I configured mine,
I selected 5. After making that selection, a popup came up telling me to
change the lockout and reset timers to 30 minutes which is what I then
selected. So maybe you just have to wait a half an hour and try again. 

-- 
____________________________________________________________
*** Post replies to newsgroup.  E-mail is not accepted. ***
____________________________________________________________

Relevant Pages

  • Re: Welcome Logon Screen locks out accounts
    ... consider a lockout count of 15-25 tries. ... > 30 minutes your accounts will not lock out. ... >> I am using the Welcome logon screen on my XP Pro system. ... >> password before the account is locked out using security policies. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [Full-disclosure] Secure OWA
    ... Running an active event log monitor (Symantec's ITA comes to mind as a ... quick example) will catch both the brute forcer and/or the lockouts ... accounts, and your OWA page is available from anywhere on the Internet, ... But a temporary lockout period would deter brute-force ...
    (Full-Disclosure)
  • Re: GPO Question
    ... Account Lockout and Password policy is domainwide - you cannot define it on ... > I have a OU called App and under App, ... > type of GPO per category. ... > -Service Accounts ...
    (microsoft.public.windows.server.security)
  • Re: User Accounts Loccked After Accessing FTP Site
    ... The security policy for lockout is 3 failed login attempts. ... configuation settings for this particular ftp site (I am relatively new at ... passwords and user accounts to be sent in clear text. ... > What is the account lockout policy for domain users? ...
    (microsoft.public.inetserver.iis.security)
  • Implications when letting people reset passwords over the Internet
    ... Imagine my organization has 15,000+ Windows 2003 AD accounts. ... I have a single Domain, ... I would made the URL available on the Internet, published via ISA 2004 (ISA ... The account able to reset passwords in AD would have the necessary rights to ...
    (microsoft.public.win2000.security)