Scenario:
Microsoft Shop.
All clients either NT4 SP5+ or Win2K Pro. NT4 Domain. 1 PDC, 2 BDC.
Anyone is potenitally affected.
Affects <10 %
Has anyone run across a situation where after a user changes their password, their account gets locked out, without their knowledge or notification? Affects random NT4 and Win2K machines. Usually they are prompted to change their domain PW as it will expire in x days. Although some just CTRL-ALT-DEL and change manually.
The local machine acts fine, accepts the change, and behaves normally. But when they go to access domain resources, they are informed that their account does not have permission to access etc. Outlook prompts for UN, PW, and Domain. And at the User Manager, the account is locked out.
I keep coming back to a replication issue between DCs, but see no signs of saturation, errors, etc. And it only affects a small percentage of our users who change PW.
Anyone who can help will score major points in my (and my bosses' books). I cannot find enough of a pattern, or force a replication of the error to open a support incident and would obviously prefer not to. Redmond has too much of our funding anyway.
Thanks for your thoughts and suggestions.
Sincerely,
Tracy W. Gaynor
Network Analyst