Windows Forum

Ask something
Discussion Locked

Network Passwords

0 helpful
7 replies

by frey_ca

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Recently on our NT Server, during an audit it was requested that we now expire passwords every 30 days, force new rotation every 3rd time, 3 incorrect attempts forces lockout. Settings have been changed and users were primily locked out - nightmare. Upon resetting the passwords, the became "locked out". Toggling to not locked out, user would wait, reboot, log back in - unable to because LOCKED OUT was re-enabled. Anyone know why this is happening? It has been a nightmare. Even if I change their password for them, lockout is greyed out - when they log back in, they are back in lock out. I have to disable lockout twice before they can actually log back in. With 800 users every 30 days - I need a resolution quickly. Thank you for your help.

7 replies

by ð

This is a nightmare and a half... The problem ur having is that they are logon on multiple pcs or connected to a shared with their id. when password expires, they force to change to a new password but the other pcs or shares are still logon with theold password. This will cause the account to lock out every other min. my best solution is to have everyone lock off their PC totally before they call it the day and try not to log on to multiple PCs with the same id.

by stillatit

Before the user changes their password, they should do the following:
1. disconnect all network drives
2. shut down outlook

At this point, they should change their password and then immediately log off their computer. When they log back in, things should work.

One problem is the automatic prompt at login to change your password. If you do this, what often happens is that your password is changed, then your login script executes, trying to connect network drives, etc. If the new passwordhas not propigated, the old one is used, which results in lockout.

When you DO have to manually release a lockout, insist that the user be completely logged out, and his computer turned off first.

Good luck.

by joseph moore

Since you have NT servers, you need to synchronize your PDC and the BDCs after you manually change the passwords.
Other then that, go with the other suggestions made.

This discussion is closed to new replies.