RE: Odd Locked Out Machine Behavior

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks, good article.

I tracked down the OU Admin of the computer which was causing the lockout.
He added it back to the domain and the error stopped. I'm not sure why the
computer object was deleted in the first place, but that's beside the point.

""Joson Zhou (MSFT)"" wrote:

Hi,

Thank you for your clarification.

In this case, when the request comes from the machine which is not in the
AD domain, the DC will not find the account in the database. This will
cause the machine to try and get the access by using the guest account,
which could result in the guest account to get locked.

This kind of network access is defined in the following KB article:

Network access validation algorithms and examples for Windows Server 2003,
Windows XP, and Windows 2000
http://support.microsoft.com/kb/103390

Hope the information is helpful.

Sincerely,
Joson Zhou
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • Re: Attn: Steve - Sharing files securely
    ... >> computer's shared disks and folders uses the Guest account. ... >> disable the Guest account for network access on that computer, ... >> In Windows XP Professional, you can disable simple file sharing. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Odd Locked Out Machine Behavior
    ... the DC will not find the account in the database. ... Network access validation algorithms and examples for Windows Server 2003, ... Microsoft Online Support ...
    (microsoft.public.windows.server.active_directory)
  • Re: File sharing
    ... >> The windows firewall is on File and print sharing is on. ... > It could be a ForceGuest issue... ... Validate User Credentials on Microsoft Operating Systems ... > If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Connecting to win2k Server with Windows 7 Ultimate
    ... We purchased a Windows 7 Ultimate upgrade, entered the product key and the upgrade was downloaded and installed via internet. ... Network access: Let Everyone permissions apply to anonymous users ...
    (microsoft.public.windows.server.networking)
  • Re: guest dial up
    ... Ramesh - Microsoft MVP ... Free Online Virus Scanners and Security Tests: ... If you are wanting the Guest account to have Internet access, ... Troubleshooting Windows XP ...
    (microsoft.public.windowsxp.general)