Re: multiple account lockouts

On Jul 20, 3:54 pm, Rob (Microsoft)
<RobMicros...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
In your default domain policy what is the reset account lockout counter value
vs the Account lockout duration? If your reset account lockout counter is a> value than the account lockout duration, change it to a lower value and

apply Group Policy to the SBS server.

Thanks



"Joseph O'Brien" wrote:
I've been having a weird problem over the last week, and I'm
embarrased to say that I just can't get to the bottom of it.

Every hour or two, my user account gets locked out. To clear it, I
have to log on to SBS 2003 as admin and uncheck the lockout box on my
user account.

The user account is only a member of domain users. I used to have it
set to domain admin a while back, but changed it due to security
concerns.

When I check the SBS 2003 security log, I can see where my logins
failed due to being locked out, but I cannot find any events that
actually cause the lockout. The domain security policy is set to
lockout after 50 invalid login attempts, but no such attempts show up
in the security log.

Can anyone give me some advice about this? I don't even know where to
start.

Thank you.
Joseph- Hide quoted text -

- Show quoted text -

Ah ha! Figured it out.

I was logged into one of our Mac OS X servers with my NT domain login.
Once I logged out of the Mac server, the problem went away. Not sure
what's going on there, but I'll look into it later.

Your advice was very helpful, so thank you. After looking around in
the local security policies for the DC, I realized that it wasn't
logging Failure Audits. Once I enabled that, I could see immediately
where the problem was coming from.

I learn something new every day.

Thanks again!

Joseph

.

Relevant Pages

  • RE: Is this a security breach on my SBS box?
    ... the behavior can happen when the SBS and client ... Configure account lockout policy. ... For medium security requirement, the recommended configurations are: ... On the problematic SBS server, please run the following command to ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA and security 680/529 errors
    ... You can try the following steps to make SBS do show the error ... Configure account lockout policy. ... For medium security requirement, the recommended configurations are: ... On the problematic SBS server, please run the following command to ...
    (microsoft.public.windows.server.sbs)
  • RE: Account Lockout -- ARGH
    ... Most were the Terminal Service Connection that Art spoke of. ... Subject: Account Lockout -- ARGH ... All security events are logged. ... Your network firewall and IDS products do not prevent Web application ...
    (Focus-Microsoft)
  • RE: Account Lockout -- ARGH
    ... Subject: Account Lockout -- ARGH ... Terminal service connection that had not been closed properly by the ... All security events are logged. ...
    (Focus-Microsoft)
  • RE: Critical Errors in Security Log, Logon Failures
    ... Step1: Implement Strong password policies. ... Step 2: Configure account lockout policy. ... Windows Settings, double-click Security Settings, double-click Account ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)