Networks·41,424 discussions

Active Directory Password Lockout

Locked

Hi All,

In our Active Directory domain we have users experiencing account lockout problems. This only happens when a user changes their password. We end up having to delete the user accounts and re-create them. Has anyone else experienced thisand if so did you find a fix?

Thanks in advance.

Topic

Active Directory Password Lockout

In reply to Active Directory Password Lockout

Please repost with all info shown in Event Viewer.

Active Directory Password Lockout

In reply to Active Directory Password Lockout

Well, first of all your solution may be causing you more problems in the long run. You should not be deleting user accounts to fix this problem. You can change a user password from the AD Users and Computers console by right-clicking on the user name and choosing “reset password”. You don’t have to know the old password, simply type in a new password and confirm it. Then make sure the user is not still locked out and have them try again.

Hard to say why this is happening without more info. One thing to check would be if there is a time difference between the workstations and the server. If there is, you should set up time synching across your network so that all workstation clocks are synchronized with the server on a regular basis. With Win2K/XP workstations, this happens automatically in the background once you have a network timeserver set up, but if you have older workstations you need to use the “net time” command either in a login script or other batch file to force synching between the workstations and server.

Hope this helps!

[Author]

Replies