Discussion Locked

Account Disable

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have Termainal server with sp6. I have set the account policy to the following:
Enforce password history = 3 passwords remembered.
Maximum password age = 30 days.
Minimum password age = 1 days.
Minimum password length = 6 characters.
Passwords uniqueness = 12.
Our Account lockout policy settings are:
Account lockout duration = 21600 minutes.
Account lockout threshold = 3 invalid logon attempts.
Forever (until admin unlocks).

I have individual accounts that are set with PASSWORD NEVER EXPIRE. But every 30 days the user accounts are automatically set to account disable. Any suggestion would be helpful.

6 replies

by jacov

Isn't there any group account policies that might be overwriting your setting on these accounts?

by jacov

Is your accounts set up on the terminal server, or do you have Domain controller managing these accounts

by steve.feldmann

Are your users logging onto the Terminal Server box or into an application. If they are logging into an application the applications settings will override the Terminal Server settings.

Also, remember that you can set the password expiration in two places within the Terminal Server. It can be set in the Policies-Accounts in the toolbar and also in the individual users setup.

Also a question - are you running another application such as MetaFrame or WinFrame on top of the Terminal Server?

This discussion is closed to new replies.