Re: User locked out
- From: "Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 10 May 2007 19:34:55 -0400
The first thing to try is to log into his user profile on the workstation.
Go to CP -> User Accounts. On the Advanced tab, click Manage Passwords and
delete the saved passwords. An incorrect saved password can cause lockouts.
Failing that, the workstation and server logs are your best starting point,
particularly the security logs.
You need to figure out why group policies are not applying on that machine.
I'd check eventid.net or start a new thread for the specific errors.
"Curtis Vaughan" <cavaughan@xxxxxxxxx> wrote in message
news:pan.2007.05.10.22.43.18.790786@xxxxxxxxxxxx
I've been having strange issue with one client using an XP Pro machine,
logging into an SBS 2003 server. Basically, when he logs in his account
will get immediately a "Locked Out" check on his AD Profile. Nonetheless,
he is logged in to the domain and can access a 2003 server fine. But the
SBS 2003 won't let him access any resources until I go in an uncheck the
"Locked out" in his profile.
Now this started yesterday, but I can't say for sure whether the lock out
was in his profile then. And in fact the errors were a little different.
The problem would be that he could log into the domain, but no resources
would be available to him. I tried logging in as different users on his
computer and no one else had the same problem.
A note! I did change his password last week, but the problem only started
happening as of actually Sunday. Thinking it might have something to do
with his password though, I changed it back to what it was. Still the
problem persisted.
I did the following 2 actions while I thought the problem was machine
based: i.e., prior to trying to log on as different users and discovering
that different users could log on without issues:
1)I have removed the machine from the domain and put it on a fake
Workgroup and then rejoined the machine to the domain. Didn't work.
2)I have chosen to reset his workstation in AD. But that didn't work.
I have noticed in his logs and error to the effect that it can't get the
group policy due to "Invalid credentials". But I can access the domain
controller at \\mydomain.com\sysvol\mydomain.com
Anyhow, I might be providing too much or the wrong information, so I'll
wait to see what people say in response.
Thanks for any input.
Curtis
.
- Follow-Ups:
- Re: User locked out
- From: Curtis Vaughan
- Re: User locked out
- References:
- User locked out
- From: Curtis Vaughan
- User locked out
- Prev by Date: Re: Email / DNS Issue Converting From POP3
- Next by Date: Re: License Issue???
- Previous by thread: User locked out
- Next by thread: Re: User locked out
- Index(es):
Relevant Pages
|
