General discussion

Locked

account lockout

By mike.jose ·
i have win 2k server with active directory and most of win98 clients often locks out. some clients locks as often as 5 times a day. how can i resolve this?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by p.j.hutchison In reply to account lockout

First, do the clients have the ADSI Client installed to work with AD better?

Collapse -

by BFilmFan In reply to account lockout

This is a well known issue in the AD world and I will tell you the quick and easy answer. The users have multiple user accounts with different passwords. These could be NT domains, Novell servers, workgroups, Unix, etc.

The workstation is holding the last credentials authenticated and when they try and access an AD resource, it sends this password and user account. Which eventually turns on the bad password bit and locks the account.

So the solution is:

All user accounts on all resources must match across the OSes.
All passwords must be synchronized across the OSes.

P-Synch is one of the more popular password synchronization tools to get around the issues of multiple OS authentication:

http://www.psynch.com/

This is a Technet article that was written covering this issue and Microsoft's advise on resolving it:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx#EOAA

Depending on your installed OS base and environment, this might be a simple issue to resolve or a huge nightmare of expense.

Collapse -

by sgt_shultz In reply to account lockout

upgrade the clients to windows 2000.

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums