Re: strange user account

Password resets are attempted to be sync'd rapidly, so I didn't mean to
suggest the password wasn't being sync'd more I was referring to the lockout
being displayed on any remote dc's (From this site). But this appears to be
a non-issue since the dc and user both reside in the same site.

If this user is in a remote site and watch them logon, I would want to make
sure the credentials are properly entered. Just make sure that the domain
is properly set. If a user has the option set so the domain isn't showing
then there is a good chance they could be attempting to logon locally.

Since there are no failures on the dc's this sounds even more like they are
authenticating locally only -or- they are disconnected from the domain and
since the password has changed cached credentials are failing. So make sure
you can ping the remote workstation. Have this user attempt to authenticate
on another workstation, I'm guessing if someone watches this user logon and
it is on a different machine it will work.

Best of luck.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"tree leafs" <treeleafs@xxxxxxxxxxx> wrote in message
news:ez76XzvVIHA.5596@xxxxxxxxxxxxxxxxxxxxxxx
Thank you both,
more details here:
1. the exact error message is: "The system could not log you on. Make sure
your User name and domain are correct, then type your password again.
Letters in passwords must be typed using the correct case."
2. reset password was done on a DC in the same site as the user sits in.
3. I waited for one hour after resetting the password and tried logon but
got the same error. So unlikely it is a synch issue.
4. Strangely again, there is no event log on any of the DCs.
5. After several consecutive failures, the account was locked.
Any thoughts?


"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
news:O%23bBcUrVIHA.3596@xxxxxxxxxxxxxxxxxxxxxxx
The problem may be slow replication. If you haven't provided enough
details but if the user lives in a different site from where you are
doing the reset, etc... and you have slow links it may not react as quick
as you think. In other words the account may be locked out but
replication hasn't caught up with your mmc console yet to show you this.

run lockoutstatus and see what is going on with this user.
http://www.microsoft.com/downloads/details.aspx?FamilyID=D1A5ED1D-CD55-4829-A189-99515B0E90F7&displaylang=en

Also if you are still having issues post and event logs or other errors
you are getting the more info and exact details you provide the easier it
will be to assist.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"tree leafs" <treeleafs@xxxxxxxxxxx> wrote in message
news:OA%23zmypVIHA.5132@xxxxxxxxxxxxxxxxxxxxxxx
Hi,
after three weeks holiday, a user failed to logon to the domain.
the user account is not disabled nor locked. The error message poped up
saying making sure username, password or domain name is correct (can't
remember exact message). Reset password did not help. And this only
happened for this user no matter which PC is using. But, after several
times failure, the account became locked.
Can anyone explain what could be wrong?
thanks in advance












.

Relevant Pages

  • XP Logon nightmare
    ... I am having the exact same error message. ... Logon failure: user account restriction. ... Not only are the other four computers are still able to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: HELP - My son has taken control of administrator privileges and disallowed acces
    ... Get you child to logon and give you account back it's admin rights ... Check to see if the real "Administrator" account has been ... He should also create a Password Reset Disk so his son can't do it ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help - Can only log into an admin account
    ... some more info on why the logon failed. ... > The only error message I get is that the password is wrong. ... >>> administrator account. ... If I change it back to an Administrator account, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Pro - Logon help
    ... Can you logon with an administrative account? ... The standard account lockout period is 5 invalid logon ... attempts in 30 mins. will lock the system for 30 mins., ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot change expired Admin password!
    ... Unfortunately I cannot logon with the old password. ... They have an Admin account ... The error message is 'You do not have permission to change your ... RequireLogonToChangePassword = 0 (the ...
    (microsoft.public.win2000.security)