RE: account is currently locked out

Hello Joe,

Thank you for posting here.

According to your description, I understand that:

You have a concern about the one user in the domain can't log onto any
computer with the error message "The referenced account is currently locked
out and may not be logged on to".

If I have misunderstood the problem, please don't hesitate to let me know.

I'd like to know that whether you receive this error when logging onto the
computers or mapping network drive (accessing file shares) when logged in
using that account.

If the error prompts during the logon process, the error typically result
from the user account being locked out. Please try to double check whether
the account has been locked in the Active Directory database. To do that:

1. On the SBS server, open the ADSIEDIT by typing ADSIEDIT.msc.
2. Expand the domain--->OU, and right click the user account CN=name in the
left panel.
3. In the Properties dialog box, indentify whether the BadPwdCount
attribute has the value 0.

If the error prompts when the user tries to access the shared folder, you
may try to map the network drive with the user name and password. To do

1. In the Explorer, click Tools -> Map network drive.
2. Select the Drive and folder path \\Filesharename\share.
3. Click Connect using a different name and type the user name and password
4. Then check how it works.

If the issue persists, please help to collect the following information for
further investigation:

1. When the error prompts exactly? Could you please take a snapshot of the
screen when the error disaplys?
2. Does this issue happen on that specific user account when attempting to
log onto any computers in the domain?
3. What is password lockout threshold in the domain?
4. Please help to collect the MPS report on the SBS server and send it to
me at Miles Li <mailto:v-mileli@xxxxxxxxxxxxx>. The report will contain the
SBS server Audit logs and Active Directory diagnosis that will help for the

Microsoft Product Support's Reporting Tools (MPSRPT_DirSvc.EXE)

More information for your reference:

900215 How the BadPwdCount attribute works in Windows 2000 and in
Windows Server 2003

Account Passwords and Policies in Windows Server 2003

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.

Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! -
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.