Windows Forum

Ask something
Discussion Locked

account lockout

0 helpful
3 replies

by mike.jose

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
i have win 2k server with active directory and most of win98 clients often locks out. some clients locks as often as 5 times a day. how can i resolve this?

3 replies

by bfilmfan

This is a well known issue in the AD world and I will tell you the quick and easy answer. The users have multiple user accounts with different passwords. These could be NT domains, Novell servers, workgroups, Unix, etc.

The workstation is holding the last credentials authenticated and when they try and access an AD resource, it sends this password and user account. Which eventually turns on the bad password bit and locks the account.

So the solution is:

All user accounts on all resources must match across the OSes.
All passwords must be synchronized across the OSes.

P-Synch is one of the more popular password synchronization tools to get around the issues of multiple OS authentication:

http://www.psynch.com/

This is a Technet article that was written covering this issue and Microsoft's advise on resolving it:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx#EOAA

Depending on your installed OS base and environment, this might be a simple issue to resolve or a huge nightmare of expense.

This discussion is closed to new replies.