Hello, Im on windows 2000 server, under active directory everytime i take a look at the properties of a certain user, the option in the account tab "Account is locked out" is checked. I would un-check it, and after a little while it would be enabled again and the user would be locked out. I tried to play around with the 'account lock policy' settings but it still gives me the same problem. Any ideas? Thanks

basically means you have somebody trying to enter the password for that account but they keep getting it wrong, or if not, check the account lockout threshold duration in the security policy. either u have a user trying to gain access continously or a hacking script running on the network that you dont know about, try renaming the user name and seeing if it solves the problem

I've seen this happen when a user had forgot to log off on a pc in another dept, and then changed their password on a different pc. The AD locked out their account because of the different passwords. It took a little investigating but a day later the user remembered they were still signed on a different computer.

I actually set all the policies (threshold policy, etc) to 'not defined'. and on every created user i have the "user cannot change password" checked, it seems that the accounts are being locked randomly after a certain amount of time regardless if they are logging on or not