RE: Account lockout

Dear Brandy,

Thank you for your respons, unfortunately it took too long and I had to
keep working during the weekend.
We did a reinstall of XP and I could recover most of my files.

I am now working on a local account till I am back in the office next
month...

Yes I think your Cached Credentials on your laptop are overwritten' theory
was the case.

The windows 2003 SBS server runs smooth (with SP1)
All my other Notebooks including my Apple Powerbook can login and get
emails.
It was just this one machine that let me down when I needed it the most.

It's a pitty I cannot do a 'connectcomputer' via VPN to get everyhting back
in place.
Besides that it gave me a good reason to buy a new IBM Tablet :-)

Thansk for your help.

Bastiaan



v-branee@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") wrote in
news:70zntD$xFHA.780@xxxxxxxxxxxxxxxxxxxxx:

> Hello Bastiaan,
>
> Thank you for posting to the SBS Newsgroup.
>
> I am sorry for the delayed response due to weekend. Please understand
> that the newsgroups are staffed weekdays by Microsoft Support
> professionals to answer your systems and applications questions. Your
> understanding is greatly appreciated!
>
> From your description, I understand that you cannot contact DC on the
> remote side. If I have misunderstood your concern, please let me know.
>
> Due to lack of detail error information for research, I need your help
> to gather following information for research:
>
> 1. Please explain in detail "When I try to login with my domain user
> account it clearly take longer to tell me it cannot be used then when
> I type a nonsens PW".
>
> 2. You mentioned "Suddenly my account is not recognized anymore", do
> you mean you cannot log in domain or cannot log on locally? What is
> the exact error message? Please type the error message to the
> Newsgroup on by one for accurate research.
>
> 3. If you can log in laptop locally, run "t" (without quotation
> marks), check whether there is any error. If yes, double click it,
> click the Copy button and paste the full content to the Newsgroup.
>
> 4. Also, please explain in detail "SBS2003 + WinXPsp2 on NB". You mean
> you installed SBS 2K3 and Win XP together on a Notebook?
>
> From your description in the post, I wonder whether the Cached
> Credentials on your laptop are overwritten. Please see:
>
> By default, Windows 2000/Win XP will store up to ten different sets of
> cached credentials in the protected storage. Once ten sets of
> credentials are in the store, the credential caching engine will reuse
> the oldest set of cached credentials. This is the cause of the logon
> failures the remote users are experiencing. The user's cached
> credentials are not being invalidated, they are overwritten and
> therefore missing from the stored set of cached credentials during the
> logon process. This is due to a change to the AutoUpdate service in
> the McAfee Anti-Virus software that affects the way the service logs
> onto the machine in order to download updates. Prior to Windows 2000
> Service Pack 3, the AutoUpdate service logged on as a service rather
> than interactively. Because the service was not using an interactive
> logon, the credentials used by the AutoUpdate server were not cached
> in the credentials cached. However, the AutoUpdate service now uses
> an interactive logon method and therefore the credentials are now
> cached using the normal password caching mechanism. After examining a
> machine from a user with failing cached credentials, it was determined
> that the full set of ten credential entries was filled with the stored
> credentials of the AutoUpdate service. Later testing verified this was
> in fact overwriting the full set of ten cached credentials and
> therefore overwriting the user's stored credentials.
>
> Please take your time to perform the steps above and collect the
> information for us to troubleshoot your issue. If anything is unclear,
> please feel free to let me know. I am looking forward to hearing from
> you!
>
> Best regards,
>
> Brandy Nee
>
.