General discussion

Locked

WIndows NT 4.0 userID lock-out

By Equintieri ·
User is on NT 4.0 SP6. His account becomes locked-out at regular intervals. There seems to be no logical explanation. He is not forgetting his PW or using a screen saver. There are no visible signs of a non-standard application. Any suggestions as to why he is being locked out?

This conversation is currently closed to new comments.

13 total posts (Page 2 of 2)   Prev   01 | 02
| Thread display: Collapse - | Expand +

All Comments

Collapse -

WIndows NT 4.0 userID lock-out

by RSP In reply to WIndows NT 4.0 userID loc ...

Enable auditing on the PC for logon failures, and search that PC for event IDs 529 and 539. With NT, the logon failure is logged on the local machine. This will enable you to rule out this machine. If you find these event IDs here, check the services to see if they are authenticating using the user's old credentials.

If your primary domain controller is running service pack 4 or above (I think), you may also see event ID 644 on the PDC, but probably not the 529/539s, in which case, the 644 may point to a machine (it seems to be hit and miss, unfortunately) which has the user's logon credentials set up incorrectly. Search the machine for mapped drives, services and background processes that may be authenticating incorrectly.

Collapse -

WIndows NT 4.0 userID lock-out

by Equintieri In reply to WIndows NT 4.0 userID loc ...

The question was auto-closed by TechRepublic

Collapse -

WIndows NT 4.0 userID lock-out

by Equintieri In reply to WIndows NT 4.0 userID loc ...

This question was auto closed due to inactivity

Back to Security Forum
13 total posts (Page 2 of 2)   Prev   01 | 02

Related Discussions

Related Forums