Re: User Keeps Getting Locked-Out

Ah,
True. But if you didn't have account lockout set, you would not have the problem no?
If your passwords are long and complex enough, they can't be guessed in 90 days, when we'd change them.
So, you protect yourself from potential DOS attacks ;-)

Regards,

Austin

"Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message news:O$cBb7lFIHA.4956@xxxxxxxxxxxxxxxxxxxxxxx
Great article but that odesn't resolve the root cause ;)

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message news:H3uTi.1962$Xg.1218@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Louise,
One of those problems of the real world and chasing it down will give you grey hairs.
For an insight into "account lockout" as a "(in-)security measure", see: http://blogs.technet.com/steriley/archive/2007/09/04/passwords-policies-once-again.aspx

Regards,

Austin

"Louis" <Louis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:B5A93E1D-50FC-47FA-BF7A-501C948C676A@xxxxxxxxxxxxxxxx
Hi,
I have a user on my Windows 2003 AD that keeps getting locked out atleast
three times a day. I believe he used his account somewhere (some service or
process) that keeps trying to authenticate with his AD account and since our
password policies enforces users to change their password every 3 months I
think the service or process keeps trying to authenticated with his old
password causing it to lock out. DCs security log reveals very little. Any
ideas on how to troubleshoot this more effectively?

All suggestions are greatly appreciated.
LT





.

Relevant Pages

  • Design/Pattern guidance to refector my current design for unit testing
    ... short requiredRoleID, out UserAccount account); ... When the application consuming AuthMgr starts up, ... Authenticate auth = new Authenticate; ... // This stuff is all here so I can unit test the authentication system ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: User Keeps Getting Locked-Out
    ... English blog: http://lordoftheping.blogspot.com ... process) that keeps trying to authenticate with his AD account and since our ... password policies enforces users to change their password every 3 months I ...
    (microsoft.public.windows.server.active_directory)
  • Re: User Keeps Getting Locked-Out
    ... English blog: http://lordoftheping.blogspot.com ... process) that keeps trying to authenticate with his AD account and since our ... password policies enforces users to change their password every 3 months I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Child Domain access
    ... > You wrote...."So you logon TO A PC using a set of credentials from a ... > should be able to authenticate in the child domain with domain / ent admin ... > account which exists in the TRUSTED parent domain? ... So if the PC is in the child domain you can logon to IT ...
    (microsoft.public.windows.server.active_directory)
  • Re: Requiring User Name and Password for Connection to Network Res
    ... If you don't have a matching account on the server, and if the Guest account on ... then the server should request that you authenticate ...
    (microsoft.public.windowsxp.network_web)