Windows Server - Locked Out User

Asked By tkutil

05-Mar-10 08:47 AM

I have one user who keeps getting locked out. As soon as we unlock the
account and he logs in his account locks again. We removed/added his computer
to the domain, deleted and recreated his user account and it just will not go
away. Any ideas? Anyone see this before? Any troubleshooting ideas?

05-Mar-10 10:18 AM

The Account Lockout Status tool shows 10 Bad Pwd Count on just one DC. Is
that because the user only authenticated with that DC or could there be a
problem with that DC.

05-Mar-10 10:35 AM

Hello tkutil,

Seems that account is used for some services where a password maybe is not
change, check the machine of that user and if this does not help go with:
http://www.microsoft.com/downloads/details.aspx?familyid=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx

http://support.microsoft.com/kb/109626

http://www.pbbergs.com/windows/articles/UserAccountLockoutTroubleshooting.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

05-Mar-10 11:10 AM

Is=20
be a=20
the=20
computer=20
will not go=20


In addition to Meinolf's suggestion, which should help you, inventory =
all services and apps that may be using that user account. See if he is =
connected concurrently elsewhere. Or take it one step further and limit =
that user to only one concurrent session with Cconnect.

Limiting a user's concurrent connections in Windows Server 2003 =
...Install the Windows 2000 Resource Kit tool named CConnect.exe on each =
client computer. This tool, together with an .adm file that is supplied =
by the tool, ...
http://support.microsoft.com/kb/237282=20


--=20
Ace

This posting is provided "AS-IS" with no warranties or guarantees and =
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit =
among responding engineers, and to help others benefit from your =
resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & =
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, =
please contact Microsoft PSS directly. Please check =
http://support.microsoft.com for regional support phone numbers.

08-Mar-10 08:25 AM

Check out an article I have on how to troubleshoot this issue:

http://www.pbbergs.com/windows/articles.htm
Select User Account Lockout Troubleshooting

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups.  This
posting is provided "AS IS" with no warranties and confers no rights.
computer

08-Mar-10 09:43 AM

Thanks everyone for your help. I used the account lockout tools, in
particular eventcombMT.exe and the Built In search for Account Lockouts.
Turned out it was a problem with Cisco ACS account.