Re: Single Account Being locked out frequently

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In news:A8689C9E-413C-43A0-8246-E0A2F8BB3D2D@xxxxxxxxxxxxx,
Lin <Lin@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
We have a SBS 2003 Premium with about 40 users on it. After we moved
to a new building everything went okay except that one user
frequently can't logon and ends up logged out. Of course, it's my
boss :-)

We tried resetting the password, no luck. This is the error I see in
the event log but I'm not sure how to interpret the error code at the
end. Anyone ever run into this? P.S. I also checked this on several
workstations and it's the same for that account everywhere.

Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12294
Date: 2/20/2007
Time: 11:43:53 PM
User: wb\wwest
Computer: LIGHTHOUSE
Description:
The SAM database was unable to lockout the account of wwest due to a
resource error, such as a hard disk write failure (the specific error
code is in the error data) . Accounts are locked after a certain
number of bad passwords are provided so please consider resetting the
password of the account mentioned above.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: a5 02 00 c0 ¥..À

That's an odd message; is it the only error? It seems to indicate that the
account *cannot* be logged out.

Does he have any computer or device (anywhere, anywhere in the whole world)
configured to check his email via POP or IMAP?
Resetting the password can't really help you, as it's the old/bad password
being used *somewhere* that is causing this problem.
Is there a windows service or scheduled task running anywhere that uses his
credentials, perhaps?

You say this happened after you moved to a new building, but a simple
people-n-equipment move can't cause this issue, so something else is going
on.

I personally prefer to disable account lockout, or set it to something
REALLY HIGH if I must use it.


.

Relevant Pages

  • Re: Resetting Machines Local Password
    ... account I was resetting the password on - nothing seem to happened as far as ... what happens if Administrator happens to be logged in when this ... > domain user account and the user was logged in at the time? ...
    (microsoft.public.scripting.vbscript)
  • Re: xpsql.cpp
    ... you might try resetting the proxy account password via the EM ... >> The SQL Server service account also needs the rights below. ...
    (microsoft.public.sqlserver.security)
  • Reset login failure count
    ... I screwed up a vnc login enough times to lock the ... account. ... How do I go about resetting the counter? ... The workaround was to use ssh and start a new vncserver but that is not ...
    (alt.os.linux.suse)
  • Re: stolen account
    ... Try resetting the password with your email address or try the secret ... Also do you have paypal account linked with the same password?? ... |> iv had account stolen my own fault replying to an email query for item i ...
    (uk.people.consumers.ebay)
  • Re: SetSPN problem
    ... The interresting thing is, nobody knows why it didn't work with adsiedit. ... >> Thank Jasper, ... >> admin account it disappears. ... >> Error Data is in record data. ...
    (microsoft.public.sqlserver.security)