Re: User Account Lockout

Ok, lets try and check the following.

1. Disable the IPSec Service on the workstation.
2. Change the RPC Service to run as 'Local System Account'.

If these settings Is already as suggested I dont for know have anything
further.

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C7A0B3F3-EC4C-4482-A532-68C80F2F8EFF@xxxxxxxxxxxxxxxx
He had several manually mapped drives which I have now removed. The issue
still remains. I dont know if they were using old credentials. I would
have
thought that they used the same credentials given at login?

The error I see when I logon refers to the printer logon scrip which is
applied to every user. It simply maps the printers.

Error: Permission Denied
Code: 0800A0046.

Something is using old credentials, I just dont know what.

"Henrik" wrote:

Does the user have a manually mapped (manually or by script) drive using
the
old credentials?

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9710507A-F265-4BEA-BAC7-5D5CFA2E5E0E@xxxxxxxxxxxxxxxx
Greetings

I have a rather unusual problem.

After changing his password, one user when he logs on to the domain
locks
out his account. The following also occurs.

My Admin logs show this entry, total Occurrences 1,555.

Pre-authentication failed:
User Name: userA
User ID: DOMAIN\userA
Service Name: krbtgt/DOMAIN
Pre-Authentication Type: 0x2
Failure Code: 0x12
Client Address: 192.168.1.5

After entering his credentials, an error message regarding my printer
log
on
script pops up saying 'access denied'.

He cannot browse server folders or do anything on the domain.

When I log into his account from another workstation, there are no
problems
at all.

I have so far

*removed the computer form the client computers in Server Manager.

*renamed the workstation.

The user is working away fin on a spare machine but I cannot seem to
pinpoint the issue his own machine. Any advice or help would be
appreciated.

Thanks.






.

Relevant Pages

  • Re: User Account Lockout
    ... Disable the IPSec Service on the workstation. ... Change the RPC Service to run as 'Local System Account'. ... I dont know if they were using old credentials. ...
    (microsoft.public.windows.server.sbs)
  • Changing passwords in different non trusted AD domains
    ... Press Ctrl-Alt-Delete. ... Then change the credentials used for the ... The user has an account in each separate ... >workstation in Domain A? ...
    (microsoft.public.win2000.security)
  • Authentication Issues ISA 2004 SP1 / Windows 2003 SP1
    ... I am looking through the logs and noticing that there are a lot of entries ... and then right after that the user's account is ... sporadically some users will get prompted for their credentials. ... I have my ISA server setup as a single adapter Web Proxy. ...
    (microsoft.public.isaserver)
  • Re: SBS 2003 Premium, user changes password and loses network share access
    ... There isn't a local account of the same name. ... Log onto the XP workstation with an admin account: ... The odd part was when prompted for credentials ...
    (microsoft.public.windows.server.sbs)
  • Re: User Activities
    ... The only logs I mentioned were the event logs (they can be found in the ... When you refer to "the system administrator ID", ... administrator account, or the administrator account local to the machine ... "through their workstation": how did they do that, ...
    (microsoft.public.windows.server.security)