Discussion Locked

Account keeps getting locked out

0 helpful
14 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I am running a network with 2003 server/active directory. I have 1 user account that every morning & about 4 times during the day becomes locked out, even when the user has been logged in for hours. I have 200 other users that have no problems. I have changed her password several times but this has no effect.
Has anyone got any ideas?
Thanks

14 replies

by nz_justice

Some one at your work area hates her. so they keep locking her out by typing in here user name then getting the password wrong till her account is locked out. Or they could just be harrasing her becasue they are dicks.

by adamcort

Check that there is not a rogue service on her PC that is trying to start with her credentials?

I have had that lock out an account before.

by azbill

It could be caused by other domain controllers not replicating her creds throughout the network. After changing the passowrd allow to 10 to 15 mins for the change to replicate.

by vak042

Hi,

You can use group policy of domain increase the times of fail login, Default is 5 times. U should increase to 100 times or more. So no one can make her account locked.:)

by entawanabi

Alike User Names and Passwords; What is the traffic when SHE gets "LOCKED" out? Ask her or find out how much of your stuff is being used to support her stuff?

by vaneckha

Hi

We use Novell eDirectory and ConsoleOne to administer our network. We have an option of intruder lockout and it gives you the time it was locked and the IP address it was locked from. You can just go to security and have a look and see who was sitting at that machine. Hope Active Directory have the same function/feature.

Hanler

by sgt_shultz

I would look in the Security section of the event log on the 2003 AD server for more clues. also search support.microsoft.com for 'account lockout' for more clues. we need more info. what os, version and sp level?

by 3pdegeiso

This article applies to Windows NT 4.0 Server troubleshooting. But the link at the bottom of the article:
http://support.microsoft.com/kb/109626/ takes you to another article for enabling debug logging for the Netlogon service. It was extremely easy to modify the debug flag parameter with the NLTEST command line in the article. I am using Windows 2003 Servers as domain controllers and the netlogon.log debug file immediately showed me which workstation or server was responsible for repeated logon attempts.

by nvious2

We had the same problem.We deleted the users profile and had him create a new one. This seems to have fixed the issue.

by yomom

If the user has a virtual machine, and they are using the same id on their virtual machine as in active directory that could be the problem.

by hollywood18052

We tried to rename the profile but his ntuser.dat won't let us do it. ntuser.dat file is close to 3GB not sure if this is causing the account to lock 3 to 4 time per day
I use a different computer with Windows XP and same thing happen. Today I'm going to disconnect his network drive that are connected when EU logon. It could be that one of the network drive is not longer available and it keeps trying to connect in the background.
Anyone one have a new ideas.

by fard_f200

this happened only when she is connected to the wireless network, we are using an AD authentication wireless network. I've deleted every wireless profile and all saved passwords. no luck. any idea please??

This discussion is closed to new replies.