Strange NT Account Lockouts
|
Original Message
|
Name: Toby
Date: November 29, 2001 at 08:00:23 Pacific
Subject: Strange NT Account Lockouts |
Comment: Some of my users get their accounts locked out while in the middle of working. I don't suspect any external hacking but I can't figure out why they are getting hacked.
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: JaJu
Date: November 29, 2001 at 14:17:53 Pacific
|
Reply: (edit)I'm getting the same thing, except even though I adjust the user properties with user manager... they still show as locked out on the users end! One particular user reported being locked out but when I reveiwed user manager, it showed they were fine.
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: Brendan
Date: December 3, 2001 at 07:48:27 Pacific
|
Reply: (edit)Have a look in the event log of your PDC. This will tell you on which workstation the lockout event occurred. Is this the same machine that they are using when the account lockout is reported. My guess is not!
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: Kevin Coates
Date: December 4, 2001 at 06:29:41 Pacific
|
Reply: (edit)I would imagine they are still logged in at another machine somewhere and while they have changed their password elsewhere, this PC keeps locking their account.
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: DAVID AVEYARD
Date: January 15, 2002 at 04:47:03 Pacific
|
Reply: (edit)Also check the user's login script on one of the Domain Controllers as well as all drives that are currently being mapped when they log in. If a user's NT permissions or group membership has changed then the rejected mapping of drives will lock the user account. The same is true for printers, as they are also a shared resource. Disconnect all the users currently mapped drives and uninstall all network printers from their profile. Have them log out and back in again so they can rerun their login script.
Report Offensive Follow Up For Removal
|
Use following form to reply to current message: