Account lockout after successful login?

Hi, don't understand this,

I have a user who's account keeps locking out. Group policy is for 3
attempts then lockout. I'm auditing logon failure events and I keep seeing
them for this user from our Citrix server. If I log onto the Citrix server
as this user, it logs on successfully, but locks out the account and logs a
load of 'pre-authentication failure' messages??? That's logging onto windows
btw, no citrix involvement that i can see. We are using roaming profiles,
but I've already deleted the roaming profile, deleted the local profile and
recreated it all from scratch - still the same. I just can't get my headf
around what process is hammering the DC with invalid logon
information/kerberos tickets and locking out the account during A SUCCESSFUL
LOGIN??? Please help I'm at my wit's end!
.

Relevant Pages

  • Re: Error binding to local domain
    ... The roaming profile for the domain admin account worked. ... > As you did not enable roaming profiles for the domain AD, ... > looks you could not logon the AD from every client computer with only ...
    (microsoft.public.windows.server.sbs)
  • RE: Account lockout after successful login?
    ... > I have a user who's account keeps locking out. ... > them for this user from our Citrix server. ... > as this user, it logs on successfully, but locks out the account and logs a ... We are using roaming profiles, ...
    (microsoft.public.win2000.general)
  • Administrator Roaming profile issues
    ... I'm writing to ask about a couple of problems I have with windows xp pro ... If I create on the server a global account that should use roaming profiles ... And when i log off the guest account locally stored gets deleted (which I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Roaming user ? Roaming profiles ?
    ... roaming profiles can achieve this for you. ... yes you can add "Domain Users" to the local admin group of the client PCs ... > My SBS server is a Win 2K SBS. ... > As far as I can see, a domain user has to have an account created on an XP ...
    (microsoft.public.windows.server.sbs)
  • NAS Storage Accounts and Windows 2003 Server
    ... I have recently bought a Buffalo Terastation NAS storage device ... onto which I would like to store all my roaming profiles. ... I added a computer account for the device in AD ... folder as the folder structure is controlled by the TeraStations own ...
    (microsoft.public.windows.server.active_directory)