Home All Groups Group Topic Archive Search About

USERS REPEATEDLY LOCKED OUT

Author
15 Feb 2005 11:12 AM
Alexander.Koppelman
Hi!,

we are working at the folowing problem:
In our domain(win2000server, AD) there are some problems with users
accounts beeing locked repeatedly.  Even a few times a week. We are
looking at the following  things:
- Drive mapping on logon, maybe windows maps drives bofor logon with wrong
credentials
- bootlog, if there are some irregularities
- Possible Errors in loginscript
- IE advanced settings
- Permissions user accout
- Account setup errors/neglencies

These are the things we asked for at the helpdesk concerning these users,
to start looking. Maybe anyone has encounterd this problem before and can
give us a new insight or some ideas,

Thanks in advance,

Alex

Author
15 Feb 2005 3:13 PM
Steven L Umbach
I don't know how long this has been happening but FYI Microsoft recommends
that if you use account lockout to use no less of a threshold of ten bad
attempts as a single bad logon attempt by a user can cause several bad logon
attempts at the domain controller. Other things to check are if the use is
using stored credentials for XP Pro computers, Scheduled Tasks, applications
that can store user credentials, drive mappings with persistent credentials,
being logged onto multiple computers after a password change, bad keyboard
or user trying with cap locks on, other users attempting to use that user's
credentials, or even malware. The link below can help and you may want to
try to use netlogon logging to see where the failed logon is originating
from by checking the log for failed logons via transitive logon.   --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

<Alexander.Koppel***@computacenter.com> wrote in message
news:DDAC168FB5C09749AD96D27804CA35D104E5F5F6@SETUBAL...
Show quote
> Hi!,
>
> we are working at the folowing problem:
> In our domain(win2000server, AD) there are some problems with users
> accounts beeing locked repeatedly.  Even a few times a week. We are
> looking at the following  things:
> - Drive mapping on logon, maybe windows maps drives bofor logon with wrong
> credentials
> - bootlog, if there are some irregularities
> - Possible Errors in loginscript
> - IE advanced settings
> - Permissions user accout
> - Account setup errors/neglencies
>
> These are the things we asked for at the helpdesk concerning these users,
> to start looking. Maybe anyone has encounterd this problem before and can
> give us a new insight or some ideas,
>
> Thanks in advance,
>
> Alex
>
Author
18 Feb 2005 12:20 PM
Alexander.Koppelmann.ext
Hi!

Thanks a lot for your reply. Ill explain what our plan of attack will
be. We try to load the ALTools from microsoft.com, This way well get
some, we beleive, valuable log information.
We realized that we still not know enough of this problem.

TNX

Alex

AddThis Social Bookmark Button