Windows Server 2003
(1)
Vista
(1)
CSci
(1)
Directory
(1)
Achiever
(1)
Trainer
(1)
Lockout
(1)
Month
(1)

Locked Out User

Asked By tkutil
05-Mar-10 08:47 AM
I have one user who keeps getting locked out. As soon as we unlock the
account and he logs in his account locks again. We removed/added his computer
to the domain, deleted and recreated his user account and it just will not go
away. Any ideas? Anyone see this before? Any troubleshooting ideas?

The Account Lockout Status tool shows 10 Bad Pwd Count on just one DC.

tkutil replied to tkutil
05-Mar-10 10:18 AM
The Account Lockout Status tool shows 10 Bad Pwd Count on just one DC. Is
that because the user only authenticated with that DC or could there be a
problem with that DC.

Hello tkutil,Seems that account is used for some services where a password

Meinolf Weber [MVP-DS] replied to tkutil
05-Mar-10 10:35 AM
Hello tkutil,

Seems that account is used for some services where a password maybe is not
change, check the machine of that user and if this does not help go with:
http://www.microsoft.com/downloads/details.aspx?familyid=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx

http://support.microsoft.com/kb/109626

http://www.pbbergs.com/windows/articles/UserAccountLockoutTroubleshooting.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Is=20be a=20the=20computer=20will not go=20In addition to Meinolf's

Ace Fekay [MVP-DS, MCT] replied to tkutil
05-Mar-10 11:10 AM
Is=20
be a=20
the=20
computer=20
will not go=20


In addition to Meinolf's suggestion, which should help you, inventory =
all services and apps that may be using that user account. See if he is =
connected concurrently elsewhere. Or take it one step further and limit =
that user to only one concurrent session with Cconnect.

Limiting a user's concurrent connections in Windows Server 2003 =
...Install the Windows 2000 Resource Kit tool named CConnect.exe on each =
client computer. This tool, together with an .adm file that is supplied =
by the tool, ...
http://support.microsoft.com/kb/237282=20


--=20
Ace

This posting is provided "AS-IS" with no warranties or guarantees and =
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit =
among responding engineers, and to help others benefit from your =
resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & =
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, =
please contact Microsoft PSS directly. Please check =
http://support.microsoft.com for regional support phone numbers.
Check out an article I have on how to troubleshoot this issue:http://www.
Paul Bergson [MVP-DS] replied to tkutil
08-Mar-10 08:25 AM
Check out an article I have on how to troubleshoot this issue:

http://www.pbbergs.com/windows/articles.htm
Select User Account Lockout Troubleshooting

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups.  This
posting is provided "AS IS" with no warranties and confers no rights.
computer
Thanks everyone for your help.
tkutil replied to Meinolf Weber [MVP-DS]
08-Mar-10 09:43 AM
Thanks everyone for your help. I used the account lockout tools, in
particular eventcombMT.exe and the Built In search for Account Lockouts.
Turned out it was a problem with Cisco ACS account.
Post Question To EggHeadCafe