Questions

I have a user (XP pro) who gets locked out of her account every day.

Tags:
+
0 Votes
Locked

I have a user (XP pro) who gets locked out of her account every day.

btoohey
Every evening after the user leaves I go into AD and unlock her account the next morning she is locked again. I've made a completely new profile on the pc and in AD and she is still getting locked out. I've unplugged the pc's power to rule out the Auto startup we have running and had no luck.
Any ideas are MUCH appreciated
  • +
    0 Votes
    issy_3

    Check for any services that might be running with that account, i had a similar situation and that was the problem

    Issy

    +
    0 Votes
    sylesh.charan

    Please make sure the user does a proper logout procdure from the desktop or laptop client. Once you have confirmed, check the users has got no logout script in AD that runs when the users logout. let me know.

    Thanks

    +
    0 Votes
    fredscomprepair

    Do you have your server, set to backup each evening? It may be resetting the lock-out with the backups, if you get my drift??

    +
    0 Votes
    xlr8faster

    Sorry if this has been posted already, just scnned titles.

    If you have checked out everything on the AD with her account, then something must be attempting a login during the evening. I would check processes on her system if they are using her specfic login credentials or other systems that might have services or processes using her credentials. You can review the security logs on the Domain controller to get the exact times of attempted logins. There should be a specific number of fail attempts and that number should match your domain password policy. good luck

    +
    0 Votes
    javi

    my guess is that the user changed his/her password. Is the user part of a microsoft exchange org? if so, i would try to make sure all of his/her mapi sessions are closed on the exchange server. Outlook sometimes has the tendency to keep multiple sessions (up to 32 sometimes) open and this can be caused due to outlook cache mode most of the times, or at least from what i have seen. The idle mapi sessions keep the old password settings that are held in cache and they lock the user out because it is attempting to keep that connection open.

    see your exchange admin, the only ways i know of how to close open mapi sessions is to dismount the store or reboot the actual server. depending on your company policy these options may not be feasible. However, its worth a shot if you can.

    good luck.

    P.S. scroll up a few notches to a post by cawallace007. His post is right on track with other possible fixes! :-P

    +
    0 Votes
    JLSBA2007

    We are also having the same issues, however it is happening to all of our VPN users (about 15). We have bumped the connections from 32 to about 47 and that is not solving the problem, as the max is reached almost daily. We had been rebooting the server, but need to know why this is happening. Could VPN be the culpret? Is anyone else having this issue

    +
    0 Votes
    perryl23

    There may be a loose nut behind it.

    +
    0 Votes
    jc@dshs

    I know this may sound a bit too simple but i have had a similar thing happen at my school where a staff user had a G-Mail account that ran at startup and wanted to access the net immediately to check for new mail. If the logon passsword was changed then the G-Mail program, at next logon, trying to access the internet via our proxy server, would lock her account until she remembered to update her internet password - ticking that "Remember my password" can be a real nuisance sometimes.

    +
    0 Votes
    Big Ole Jack

    That's usually what it is and is causing the lockout due to authentication errors.

    +
    0 Votes
    JLSBA2007

    Do you know what we could try to fix the issue? We are running VPN 4.0 and outlook 2003
    Thank you

    +
    0 Votes
    DaveDXB

    Thats the solution

  • +
    0 Votes
    issy_3

    Check for any services that might be running with that account, i had a similar situation and that was the problem

    Issy

    +
    0 Votes
    sylesh.charan

    Please make sure the user does a proper logout procdure from the desktop or laptop client. Once you have confirmed, check the users has got no logout script in AD that runs when the users logout. let me know.

    Thanks

    +
    0 Votes
    fredscomprepair

    Do you have your server, set to backup each evening? It may be resetting the lock-out with the backups, if you get my drift??

    +
    0 Votes
    xlr8faster

    Sorry if this has been posted already, just scnned titles.

    If you have checked out everything on the AD with her account, then something must be attempting a login during the evening. I would check processes on her system if they are using her specfic login credentials or other systems that might have services or processes using her credentials. You can review the security logs on the Domain controller to get the exact times of attempted logins. There should be a specific number of fail attempts and that number should match your domain password policy. good luck

    +
    0 Votes
    javi

    my guess is that the user changed his/her password. Is the user part of a microsoft exchange org? if so, i would try to make sure all of his/her mapi sessions are closed on the exchange server. Outlook sometimes has the tendency to keep multiple sessions (up to 32 sometimes) open and this can be caused due to outlook cache mode most of the times, or at least from what i have seen. The idle mapi sessions keep the old password settings that are held in cache and they lock the user out because it is attempting to keep that connection open.

    see your exchange admin, the only ways i know of how to close open mapi sessions is to dismount the store or reboot the actual server. depending on your company policy these options may not be feasible. However, its worth a shot if you can.

    good luck.

    P.S. scroll up a few notches to a post by cawallace007. His post is right on track with other possible fixes! :-P

    +
    0 Votes
    JLSBA2007

    We are also having the same issues, however it is happening to all of our VPN users (about 15). We have bumped the connections from 32 to about 47 and that is not solving the problem, as the max is reached almost daily. We had been rebooting the server, but need to know why this is happening. Could VPN be the culpret? Is anyone else having this issue

    +
    0 Votes
    perryl23

    There may be a loose nut behind it.

    +
    0 Votes
    jc@dshs

    I know this may sound a bit too simple but i have had a similar thing happen at my school where a staff user had a G-Mail account that ran at startup and wanted to access the net immediately to check for new mail. If the logon passsword was changed then the G-Mail program, at next logon, trying to access the internet via our proxy server, would lock her account until she remembered to update her internet password - ticking that "Remember my password" can be a real nuisance sometimes.

    +
    0 Votes
    Big Ole Jack

    That's usually what it is and is causing the lockout due to authentication errors.

    +
    0 Votes
    JLSBA2007

    Do you know what we could try to fix the issue? We are running VPN 4.0 and outlook 2003
    Thank you

    +
    0 Votes
    DaveDXB

    Thats the solution