RE: SBS user cannot logon on any network PC

Tech-Archive recommends: Fix windows errors by optimizing your registry



I appear to have the same or a similar problem at a client as well. A user's
password will expire as per the usual 40 day cycle. The user will change
their password, and everything will appear to be fine. The next time they
attempt to login, they will get access to their desktop, but no network
resources. They will be asked for passwords to connect o exchange, and all
network drives will be offline. When we examine their account, it will appear
to be locked out. A quick fix for now is to set the account to "Password
never expires" and "User cannot change password". Now we need to change the
passwords at the console periodically.

"Steven Zhu [MSFT]" wrote:

Hi Roger,

Thanks for posting here.

From your post, my understanding on this issue is: one user cannot logon to
any workstation in your SBS domain. If I am off base, please feel free to
let me know.

Before we go any further, please let me know the following information:

1. When the issue appears, what is the error message indicates that you
cannot log on to domain? If it is Account is locked out; Password is
expired or any other error message? Please let me know the detailed error
message.
2. Please restart computer while network cable is connected and then press
F8, select Safe Mode with Networking to check if there is an update.
3. Please go to Domain Controller, open Active Directory Users and
Computers console to see if the client''s computer account exists.

Then please refer to following article to download and run the MPS_Report
tool (Alliance Edition):
818742 Overview of the Microsoft Configuration Capture Utility
(MPS_REPORTS) http://support.microsoft.com/?id=818742

A CAB file will be generated for your convenience in the
%systemroot%\MPSReports\Setup\Lite\Cab directory called
%COMPUTERNAME%_MPSReports_.CAB. The CAB file will contain the reports
generated by the MPS Reporting Tool. If the CAB file isn''t produced,
please compress all of the result files under
%systemroot%\MPSReport\Setup\Lite as a Zip file. (Note: %systemroot% is the
folder where you install Windows.)

Send the CAB (Zip) file to me at v-stezhu@xxxxxxxxxxxxx with the post''s
subject.

If you have any concerns, please feel free to let me know.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================




.



Relevant Pages

  • Re: Force password reset for administrator
    ... When I logon to an account where the password has ... Except if the account is set so that "Password never expires", ... Microsoft MVP Scripting and ADSI ... expired, your code would configure so passwords no longer expire. ...
    (microsoft.public.scripting.vbscript)
  • Re: /etc/default/passwd and SSH
    ... SYNOPSIS: Description of "Password Aging" ... The warn field is the number of days of warning the user gets on login ... the expire field perform very distinct functions that are in no way related. ... The account should be disabled after a week so that it can not ...
    (Focus-SUN)
  • Re: expired passwords
    ... To expire a password for a user and then try to log back in for that ... You must change your password now and login again! ... If password aging has been enabled for your account, ... you don't actually know if you typed an incorrect username or an incorrect password. ...
    (Fedora)
  • Re: PwdLastSet
    ... AD Password expiration is handled in a very simple way and done when a user attempts to log on (or their account is otherwise trying to auth). ... Now I simply compare pwdLastSet against that value and anything less than it is expired. ... Directory: Windows Server 2003 ...
    (microsoft.public.win2000.active_directory)
  • Re: PwdLastSet
    ... user attempts to log on (or their account is otherwise trying to auth). ... it is the attribute called maxPwdAge. ... it is expired. ... Directory: Windows Server 2003 ...
    (microsoft.public.win2000.active_directory)