Windows Forum

Ask something
Discussion Locked

account lockout problem

0 helpful
7 replies

by rcoolman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a Win2k domain w 3 DC's one of which runs Exchange. Our remote users using OWA are having a problem with their account getting locked out. The lockout policy is to lockout afer 3 failed logon attempts, but the users in question swear they aren't doing it (ok, I know - users) Anyway, is there anything else that can cause a lockout. We are trying to decide if we are dealing with unauthorized access attempts, or moronic users or some other phenomenon. If you don't know of any other cause of lockout, can youu suggest a trouble-shooting procedure? Wre are auditing account logon success and failure, but no failures are being logged. Help!

7 replies

by clearsmashdrop

One of the most common way my users lock themselves out by changing their password on one PC, while they are still logged into another PC somewhere else. Check if this is happening to you.

Do you see, failed logon attempts in your event viewer?

by tnturner.com

I would check the users rights again and loggin times IE: rules. Likeleyhood of unauthorized access is always there, never rule it out, but I think the problem here is the user. I would have password changed he/she is probly forgetting a lower/uppercase letter.But if you are logging failures and they are using correct password and there is no failures showing in audit, then I would suggest going back to basics in user rights and logging rules and recheck them.

by kashwayne

I would check the use rights and if the same problem is still happening, do not allow the use to change the password reimplement a new password policy and do not allow anyone to change their password. Or use a test account with the same rights as the user who is having the password problem. and this should allow you to find the source of the problem.

by rcoolman

They would love to be able to not change passwords, but its a security policy we have to have.

This discussion is closed to new replies.