Re: User Keeps Getting Locked-Out



Hi Louise,
One of those problems of the real world and chasing it down will give you
grey hairs.
For an insight into "account lockout" as a "(in-)security measure", see:
http://blogs.technet.com/steriley/archive/2007/09/04/passwords-policies-once-again.aspx

Regards,

Austin

"Louis" <Louis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B5A93E1D-50FC-47FA-BF7A-501C948C676A@xxxxxxxxxxxxxxxx
Hi,
I have a user on my Windows 2003 AD that keeps getting locked out atleast
three times a day. I believe he used his account somewhere (some service
or
process) that keeps trying to authenticate with his AD account and since
our
password policies enforces users to change their password every 3 months I
think the service or process keeps trying to authenticated with his old
password causing it to lock out. DCs security log reveals very little. Any
ideas on how to troubleshoot this more effectively?

All suggestions are greatly appreciated.
LT



.



Relevant Pages

  • RE: Cannot authenticate wireless
    ... No. Server 2003 is a clean install. ... authenticate) have "Dial In" unchecked. ... >Is your Windows 2003 AD domain an upgrade from a Windows ... >The computer that works had an account created under ...
    (microsoft.public.windows.server.networking)
  • RE: computer account change password with Windows 2008 domain
    ... Our case SRZ080225000456 is open for the Windows 2008 KDC being unable ... to authenticate any account with a "/" in the principal name. ... computer account change password with Windows 2008 domain ...
    (comp.protocols.kerberos)
  • Log on a user via ASP script?
    ... server and give those account credentials to my users. ... Windows logon to actually ... Windows basic logon to authenticate the user to IIS with a generic account. ... Using ASP to perform a basic windows logon in step 2 is the section I'm ...
    (microsoft.public.inetserver.asp.general)
  • RE: Cannot authenticate wireless
    ... Is your Windows 2003 AD domain an upgrade from a Windows 2000 AD? ... A computer account is needed for Wireless connections in Windows 2000, ... The computer that works had an account created under Windows 2000 AD when it joined the domain. ... The client that does authenticate is logged off ...
    (microsoft.public.windows.server.networking)
  • Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator
    ... This is common in most Pre-Installed Windows System. ... > Administrator account allows local Administrator ... IBM Systems with preinstalled Microsoft ...
    (Bugtraq)

Loading