Re: Urgent: All AD users are locked out

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I 've already did. thx

can you advice me in advance

"Florian Frommherz [MVP]" wrote:

Howdie!

Mhd wrote:
we have an w2k3 domain environment, with more than 300 users account.

Today morning all users are locked out frequently.

Please help to sort out this critical problem

I've heard that on several places. There seems to be a common source of
evil out there. For starts, enable auditing and check the security logs
where those lockouts happen. Also evaluate whether loosening the
security policy is an option for you: instead of locking users
completely out, disable the account for x minutes.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

.

Relevant Pages

  • Re: Urgent: All AD users are locked out
    ... Please help to sort out this critical problem ... enable auditing and check the security logs where those lockouts happen. ... Also evaluate whether loosening the security policy is an option for you: instead of locking users completely out, disable the account for x minutes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: File that manages login details
    ... I have created a number of users so that my friends and family may login to ... > Domain Controller Security Policy and logon events for Domain Security ... > security logs of multiple computer or buy a third party program that can ...
    (microsoft.public.security)
  • Password Policy - .net Server
    ... We have just installed the 180 day trail version of Windows .net 2003 Server ... Computer Settings ... Domain Controller Security Policy ... I really need to sort this asap. ...
    (microsoft.public.win2000.group_policy)
  • Password Policy - .net Server
    ... We have just installed the 180 day trail version of Windows .net 2003 Server ... Computer Settings ... Domain Controller Security Policy ... I really need to sort this asap. ...
    (microsoft.public.windows.group_policy)
  • Re: JIT emulator needs
    ... in place for this sort of affair. ... "opt-in" on the part of the security policy, ... Changing the meaning of an established explicit security policy is not ...
    (Linux-Kernel)