User Account setting changed overnight!!!

anonymous_at_discussions.microsoft.com
Date: 04/30/04 

Date: Fri, 30 Apr 2004 09:37:16 -0700

I have "User can change password" on all users normally
checked, but every morning, when I come in to find that
user connections are not working because they have account
lockouts, I also notive that "User can change password" is
no longer checked on some accounts.

I just installed this server and only I have physical
access and know the admin passwords. It is behind a
hardware firewall (Sonicwall SOHO3) with HTTP, FTP and
SMTP ports open to this machine.

No access to the server occurs by staff after normal
business hours. I can only assume that the User Account
setting change and account lockout is being caused by
someone/thing through the internet connection.

What are the most common ways for this to happen and how
can I prevent account lockouts, besides turning lockout
off?

Thanks, Dave.

Relevant Pages

  • Re: User Account setting changed overnight!!!
    ... > user connections are not working because they have account ... > I just installed this server and only I have physical ... I can only assume that the User Account ... > setting change and account lockout is being caused by ...
    (microsoft.public.windows.server.sbs)
  • Re: Account lockouts
    ... for reusable passwords and the AAA infrastructures that rely upon them? ... In that context, account lockout policy -- duration, threshold, lockout ... > cracking attacks. ...
    (microsoft.public.security)
  • Re: User accounts are being locked out
    ... Password Policy and Account Lockout Policy are both domain-wide policies, ... machineA and machineB. ... download updated signature files located on a network share. ...
    (microsoft.public.windows.server.general)
  • Re: disable users while user is logged into the domain
    ... That article i read more and more before, but it does not state anything about "disabling" an account. ... Assigning an account lockout, which a domain controller performs to ... Changing the password on a domain controller computer account. ... The PDC emulator receives urgent replication of account lockouts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Wierd permissions on user accounts
    ... That said, as I mentioned earlier, your permissions are bad. ... *nobody* will be able to change password on the account. ... I have the following deny rules.. ...
    (microsoft.public.windows.server.active_directory)