Question

  • Creator
    Topic
  • #2237193

    I have a user (XP pro) who gets locked out of her account every day.

    Locked

    by btoohey ·

    Every evening after the user leaves I go into AD and unlock her account the next morning she is locked again. I’ve made a completely new profile on the pc and in AD and she is still getting locked out. I’ve unplugged the pc’s power to rule out the Auto startup we have running and had no luck.
    Any ideas are MUCH appreciated

All Answers

  • Author
    Replies
    • #2615659

      Clarifications

      by btoohey ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Clarifications

    • #2615656

      example of test CCNA2

      by jewuk_bali ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      please help me how can i get example test of ccna 2 v2.1

    • #2615655

      what’s the lockout policy

      by cg it ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      and what are in the domain security logs? is there a lot of failed logon attempts?

      typically wrong user name or password lockout policy is anywhere from 10 to 30 minutes. complete lockout requires an admin to go into AD Users and Computers/her user account and manually lock the account.

      • #2615651

        That’s just it,

        by btoohey ·

        In reply to what’s the lockout policy

        her account is being locked out before she ever attempts to login. The account is setup the same exact way as all other users and no other user has had the issue.

      • #2615650

        That’s just it,

        by btoohey ·

        In reply to what’s the lockout policy

        her account is being locked out before she ever attempts to login. The account is setup the same exact way as all other users and no other user has had the issue.

    • #2615649

      virus. as CG says, what is in the event logs please

      by sgt_shultz ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      a virus or a hacker fits your symptoms.

    • #2615623

      Has this always happened?

      by neilb@uk ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Or can you track down when it started to something like a password change? This can cause this issue if the user has a scheduled task that’s trying to run with her as the user or a drive mapping on another PC is trying to re-establish using the old password.

      Edited to add some helpers…
      http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e

      • #2615621

        The user started with the company about a month ago,

        by btoohey ·

        In reply to Has this always happened?

        everything was fine for a few days but I discovered a typo in her acct and corrected it, the issue started shortly after. I then deleted the acct completely off the pc and AD and recreated it with the correct spelling. I’ll have to check the scheduled tasks and the drive mappings but as far as aI know her mapped drives are all accessable.
        Thanks for the ideas so far and keep them coming.
        Brian

        • #2615603

          Any other ideas?

          by btoohey ·

          In reply to The user started with the company about a month ago,

          I checked scheduled tasks and there where none and her mapped drives opened without issue.

        • #2615583

          Saved passwords

          by pc21geek ·

          In reply to Any other ideas?

          Does the client have a saved password in XP?
          Go into the control panel, then users, click on her name, then on the Advanced tab to the right. Then click on Manage Passwords. If she has an old password stored in there (proxy, mapped drive, etc) then it will lock her out all the time.
          Not sure this is your issue, but its one more thing to look at.

          Good luck,

          Kevin

        • #2615582

          Saved passwords

          by pc21geek ·

          In reply to Any other ideas?

          Does the client have a saved password in XP?
          Go into the control panel, then users, click on her name, then on the Advanced tab to the right. Then click on Manage Passwords. If she has an old password stored in there (proxy, mapped drive, etc) then it will lock her out all the time.
          Not sure this is your issue, but its one more thing to look at.

          Good luck,

          Kevin

        • #2615579

          Multiple log ons?

          by comphelpnj ·

          In reply to Any other ideas?

          Perhaps this user is logged onto more than one workstation? It doesn’t have to be a scheduled task that is causing the problem – simply being logged onto another workstation with an expired password could result in account lock outs.

        • #2615572

          Good thinking.

          by btoohey ·

          In reply to Multiple log ons?

          It turns out theat the user was at a different cube when she started and was still logged on. Now I just have to wait for tomorrow morning to verify that was the cause. I can’t imagine what else it could be.
          Thanks!!!

        • #2614096

          User logged in Elsewhere

          by aletha ·

          In reply to Good thinking.

          I had something like this before, the user is logged in elsewhere on another PC. Most properly a PC that is not shutdown everyday and is still on all this time. Check the Event logged on the AD server, that is how I found out.

        • #2615556

          Was this the problem?

          by karydavis ·

          In reply to Multiple log ons?

          I’m just curious because I had the same problem once, only I was the user logged in on a machine I was working and had changed my password before going back to it….

        • #2615535

          Follow-up??

          by your mom 2.0 ·

          In reply to Was this the problem?

          Dontcha hate it when someone submits a question, asks for help, takes your suggestion, and then doesn’t follow up to tell you if it worked? Where’s the learning opportunity in that?

          Brian, where ever you are, you’re a tech-tease.

        • #2614061

          This worked for me…

          by jscogin ·

          In reply to Multiple log ons?

          Make sure there is noone on the network with teh same Computer name.

          Lete me know if you find a solution to your problem.

          Jeremy

        • #2633973

          License

          by hpesulima ·

          In reply to The user started with the company about a month ago,

          Please check your License, check or you have enough.

        • #2614855

          AD is your problem

          by caricc135 ·

          In reply to The user started with the company about a month ago,

          Try making sure your Active directory has the correct info then for an update across your servers. This new replication should fix the error.

      • #2633937

        try this

        by rippleintheforce ·

        In reply to Has this always happened?

        This can happen when the user is logged into two different machines and changes the password on one but does not log out of the other. Make sure the user is not logged in to two different machines. Hope this helps.
        jd

        • #2633920

          Account Expiration

          by will.conner ·

          In reply to try this

          Another thing to look at is make sure that the account is not set to expire after one day on the AD setup. Just a thought.

        • #2606802

          Service associated with the account

          by keq ·

          In reply to Account Expiration

          possible:
          Is there a service associated with the account. If so, and the user has changed her password since the service was setup you’ll have to either change the password for the service to match the current password or associate the service with another account.

    • #2633878

      OFFICE PRANK

      by a.southern ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Has she been annoying any of her collegues lately?

      One brilliant practical joke is to go to a non-descript terminal and put her logon name in and “alsdfhas” “asldfhafd” and “qlretjh” as her password three consecutive times.

      Most systems will then lock the account.

      Brilliant “joke” to play on your collegues, especially if the first time you do it, wait behind their desk and after it says “Account locked out” go up to them and tell them Bill Jones from Personnel/HR was here asking about them……….

      -AS

      • #2614798

        Office Prank 2

        by jeffaaaaaa9 ·

        In reply to OFFICE PRANK

        A much funnier and less destructive prank is to use the Win XP screen rotation feature on a user’s PC when their back is turned. This is achieved using ‘CTRL + ALT + (arrow key)’, the arrow key you use (up, down, left, right) is the edge of the screen where the top edge of the image will be. Very perplexing if you don’t know about this feature.

        You wouldn’t believe the number of people who do this accidentally when trying to press ‘CTRL + ALT + DEL’ and then phone the helpdesk in a panic because their screen has turned upside down!!!

        • #2513189

          CTRL + ALT + UP

          by a.southern ·

          In reply to Office Prank 2

          I can’t get this to work!

          Is this on XP pro still?

          -AS

    • #2633877

      Account Lockout

      by rcassel ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      If the user has manually mounted a drive on another PC with his or her User ID and an old password the account will be locked out after a few hours.

      • #2615544

        account lookout, how do you find prior drive mapping?

        by jxoco ·

        In reply to Account Lockout

        We have the same thing with one of our users. A long time user, but we just instituted password changing after 30 days.
        So if she has a drive mapping ‘out there’ how can I find the machine that the mapping is on.
        Like a needle in a haystack we have about 700 machines on the network. How can I narrow it down?

        • #2614617

          Try this…

          by mrrich ·

          In reply to account lookout, how do you find prior drive mapping?

          You ought to be able to check her logons on your DC’s event log. Once you know which machines she has used its easy, just check those workstations for the drive mappings.
          RDP to the workstation and log in as the user.
          (Which may mean changing her password again…)

          Another way would be to set her a logon script that lists the mapped drives to a file. Run that for a few days and see what you get.

    • #2615536

      Passwords

      by lyle ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Many users type the password incorrectly or do not remember it. How many tries does she get before being locked out? Is she in the habit of always having the Caps Lock on? Also with many systems requiring several passwords – Domain, AS/400, Firewall, etc. it is easy to confuse even appearantly savvy users as to which password is used when.

    • #2615504

      Has user login into server or other computer?

      by bmacias ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Has the user logged into another computer or server (terminal Server) since last password change? I don’t suppose you have any logging or alert system turned on that would tell you which machine is making the calls (You using sitescope)? The Lockout could be caused by a service or schedule task running with user’s old credentials (I hold company lock out record for that one).

      • #2615491

        This was most common

        by 308tom ·

        In reply to Has user login into server or other computer?

        A user who “forgot” they had logged on to another computer, failed to logoff AND had changed their password in the interim has been my most common cause of this issue. Usually they only “remember” after you find the offending workstation.

        Check the Domain Controller security logs to find what may be a 529 error or a Kerberos error 0x18 and may have the user’s ID in it. That will yield the IP address of the station that is trying to authenticate with a bad password and triggering the lockout.

        Another possibility is the user mapped a persistent static drive with their credential while another user was logged in on another machine – and subsequently changed their password.

        Again back to the Domain Controller security logs to find the offending IP.

    • #2615440

      Saved passwords?

      by bconley ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Perhaps at some point she saved a password that authenticates her to some domain resource such as authenticating to a file share or IIS site. We have a analytical cell counter instrument that uses IIS.

    • #2614087

      Things that worked for me…..

      by cawallace007 ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      This has only happened after a password change for my users, including myself.

      It gets fixed by doing the following, not sure which one.

      Turn off cache mode in MS Outlook.
      Delete and recreate any printers or drive mappings that were created locally versus through domain login.

    • #2614059

      I have a user (XP pro) who gets locked out of her account every day.

      by issy_3 ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Check for any services that might be running with that account, i had a similar situation and that was the problem

      Issy

    • #2614040

      Lock out in AD

      by sylesh.charan ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Please make sure the user does a proper logout procdure from the desktop or laptop client. Once you have confirmed, check the users has got no logout script in AD that runs when the users logout. let me know.

      Thanks

    • #2614634

      Check your server tapes.

      by fredscomprepair ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Do you have your server, set to backup each evening? It may be resetting the lock-out with the backups, if you get my drift??

    • #2605906

      Service ot process on her system or other system

      by xlr8faster ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      Sorry if this has been posted already, just scnned titles.

      If you have checked out everything on the AD with her account, then something must be attempting a login during the evening. I would check processes on her system if they are using her specfic login credentials or other systems that might have services or processes using her credentials. You can review the security logs on the Domain controller to get the exact times of attempted logins. There should be a specific number of fail attempts and that number should match your domain password policy. good luck

    • #2605855

      Close any open mapi connections

      by javi ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      my guess is that the user changed his/her password. Is the user part of a microsoft exchange org? if so, i would try to make sure all of his/her mapi sessions are closed on the exchange server. Outlook sometimes has the tendency to keep multiple sessions (up to 32 sometimes) open and this can be caused due to outlook cache mode most of the times, or at least from what i have seen. The idle mapi sessions keep the old password settings that are held in cache and they lock the user out because it is attempting to keep that connection open.

      see your exchange admin, the only ways i know of how to close open mapi sessions is to dismount the store or reboot the actual server. depending on your company policy these options may not be feasible. However, its worth a shot if you can.

      good luck.

      P.S. scroll up a few notches to a post by cawallace007. His post is right on track with other possible fixes! 😛

      • #2512503

        Mapi connections

        by jlsba2007 ·

        In reply to Close any open mapi connections

        We are also having the same issues, however it is happening to all of our VPN users (about 15). We have bumped the connections from 32 to about 47 and that is not solving the problem, as the max is reached almost daily. We had been rebooting the server, but need to know why this is happening. Could VPN be the culpret? Is anyone else having this issue

    • #2605833

      Replace the keyboard

      by perryl23 ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      There may be a loose nut behind it.

    • #2606128

      internet authentication?

      by jcdshs ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      I know this may sound a bit too simple but i have had a similar thing happen at my school where a staff user had a G-Mail account that ran at startup and wanted to access the net immediately to check for new mail. If the logon passsword was changed then the G-Mail program, at next logon, trying to access the internet via our proxy server, would lock her account until she remembered to update her internet password – ticking that “Remember my password” can be a real nuisance sometimes.

    • #2512482

      Some windows service is runing under her user context

      by big ole jack ·

      In reply to I have a user (XP pro) who gets locked out of her account every day.

      That’s usually what it is and is causing the lockout due to authentication errors.

Viewing 18 reply threads