Re: User Keeps Getting Locked-Out

What i wanted to point out, is that there is real problem behind (a stored invalid login/password). So something is not working. I agree with Steve Riley blog's post (i even translated it to french), but in this case i think it's better to both disable the locking account feature AND to find where is it stored to make it work again (and maybe use a different account)

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message news:%23uJQZimFIHA.484@xxxxxxxxxxxxxxxxxxxxxxx
Ah,
True. But if you didn't have account lockout set, you would not have the problem no?
If your passwords are long and complex enough, they can't be guessed in 90 days, when we'd change them.
So, you protect yourself from potential DOS attacks ;-)

Regards,

Austin

"Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message news:O$cBb7lFIHA.4956@xxxxxxxxxxxxxxxxxxxxxxx
Great article but that odesn't resolve the root cause ;)

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message news:H3uTi.1962$Xg.1218@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Louise,
One of those problems of the real world and chasing it down will give you grey hairs.
For an insight into "account lockout" as a "(in-)security measure", see: http://blogs.technet.com/steriley/archive/2007/09/04/passwords-policies-once-again.aspx

Regards,

Austin

"Louis" <Louis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:B5A93E1D-50FC-47FA-BF7A-501C948C676A@xxxxxxxxxxxxxxxx
Hi,
I have a user on my Windows 2003 AD that keeps getting locked out atleast
three times a day. I believe he used his account somewhere (some service or
process) that keeps trying to authenticate with his AD account and since our
password policies enforces users to change their password every 3 months I
think the service or process keeps trying to authenticated with his old
password causing it to lock out. DCs security log reveals very little. Any
ideas on how to troubleshoot this more effectively?

All suggestions are greatly appreciated.
LT






.

Relevant Pages

  • Re: losing rows when sorting in excel
    ... >Look for discontiguous row numbers in the row header, ... >> other) just seem to disappear. ... So, it's a real problem ... >> something specifically with their account. ...
    (microsoft.public.excel.misc)
  • Re: Alliance & Leicester eSaver
    ... I had a similar situation when I opened an Premier Direct Current Account ... But the real problem was ... Same here, though I assumed I was missing a separate letter, which ...
    (uk.finance)
  • Re: Alliance & Leicester eSaver
    ... I had a similar situation when I opened an Premier Direct Current Account ... But the real problem was ... Same here, though I assumed I was missing a separate letter, which ...
    (uk.finance)
  • Re: Things I have noticed lately
    ... or someone else tells them they are thinking too much but thats not the ... The real problem is thinking about the wrong stuff at the ... into account and that into account. ... "It took years of experience to miss that shot". ...
    (rec.sport.billiard)
  • Re: User Keeps Getting Locked-Out
    ... English blog: http://lordoftheping.blogspot.com ... process) that keeps trying to authenticate with his AD account and since our ... password policies enforces users to change their password every 3 months I ...
    (microsoft.public.windows.server.active_directory)