Windows Forum

Ask something
Discussion Locked

User account keeps getting locked out.

0 helpful
9 replies

by bra-k

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a user that his domain account keeps getting locked out. We know for sure it is his machine that is trying to login as him with a bad password before he actually logs into the machine. I have applied all MS updates, ran virus software, and spy detect software. I have also checked all of the services to make sure all are logging in as system and not his ID. This has been happenning for about a month. It started the last time he changed his password. After we unlock his account he can login and work fine until the next time he logs out and tries to log back in again. This does not happen if he logs into another pc, only on the pc he uses all of the time. I have deleted his profile off of the local computer to no avail.I am at a loss as what to do next PLEASE HELP.

Thank you,
Bra-k

9 replies

by shawn

Check for values in registry key:

HKLM\Software\Microsoft\Windows NT\Current Version\Winlogon

Specifically, check to see if there is a string value called "DefaultPassword". This value, when used with "DefaultUser" and "AutoAdminLogon" will automatically log a user on. If there is a bad password here (because your user changed it a little while ago), this could be causing some problems.

Hope this helps.

Cheers,
Shawn

by tlath1972

have you tried anybody else logging onto that computer. Maybe try a different keyboard or make sure that the cap locks are on or off. Check the event log to see if there are any errors. Check the password. Check the local policy on that machine. It could be computer configuration - user rights -log on localy. or it could have something to do with the password policy under computer configuration -securtiy settings - password policy. Check his user priviliges. These are some things to check out.

by tumtum73

A few things to try...

1. You mentioned that you deleted his profile, to no avail. Does this person have a roaming or local profile. If it's roaming the profile exists on the server and would need to be deleted from there.

2. Are there any tasks scheduled using AT or the Task Scheduler that are trying to do things as that user?

Check those...

Steve

by bra-k

Your answer 2 was the problem. The user had set up a schedule to run every five minutes under his ID and when he changed his password it would not run anymore. It was trying to login as him with his old password. Thanks so very much for your input.

Bra-K

This discussion is closed to new replies.