Windows Forum

Ask something
Discussion Locked

User locked out after first attempt!

0 helpful
9 replies

by kareem 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have the setting to lock users workstations after 3 failed attempts. However, I have 2 users who claim they are being locked out on the very first login attempt. For 1 particular user it happens the day after the password has changed (but she claims she used the correct password). The other user claims it happens every other week or so. Can you tell me why this is occurring to only these two users and not everybody else?
I know I could look in the security log (cause I have an audit on lock outs, but for some reason I am not able to view the security log even as administrator - 'a required privilege is not held by client').

9 replies

by dc1

Make sure that the users aren't running any services in there ID's context. That would cause an invalid login when the service tries to restart and login.

by bra-k

This is not really answer but a statement. Are you sure that the users are only trying one time to login? I have had this happen and the user insisted that they only tried one time, but when I tried it, it worked fine and found out the user was not correct. Have you tried it yourself and got the same results? Just make sure that the user is correct in their statement about how many times they tried before it locked them out.

Bra-k

by aaron_wurthmann

In addition to answer number one you may want to also check the number of machines that the user is logged into. If they are logged into three machines, they change their password on one of them, then they forget to log off the other two machines. Those other two machines/sessions are going to attempt to authenticate to the domain controller, with the wrong password, and there for lock the user out. To avoid that when the users password expires have them logout of all the machine their are logged into at the time.

by ustutz

We just instituted this feature ourselves. If your users are on Windows 95/98 workstations, they do not "log in" in the sense you expect from a UNIX workstation, for example. When you "log in" in the morning you just set up your security credentials. Then, every time you access a network resource - printer or shared directory, etc. - you run kind of a background log in session on that server, with your credentials. So, if you map five drives at log on, and you fat finger your password, you just hit six failed logon attempts - and are locked out. Fo rthe security log, check your User Rights in User Manager for Domains.

This discussion is closed to new replies.