account lockout problems

From: bdoub (ntbug2000@yahoo.com)
Date: 03/19/02 

From: "bdoub" <ntbug2000@yahoo.com>
To: "Focus-Ms@Securityfocus. Com" <focus-ms@securityfocus.com>
Date: Tue, 19 Mar 2002 07:56:47 +0530

Need some help folks,

Server : NT 4.0 sp6a
Clients: win2k prof sp2

Problem Description:
Account policies is setup to change passwords once
in 'X' days with a password history setup.

User gets prompted to change password when
nearing the deadline. User hits 'yes - change
password now' - account gets locked out. Instead if
the user hits 'no - will change password later' and hits
ctrl-alt-del and chooses 'change password' option,
the user is able to change the password.

Please Note:
1. I have already looked at articles q263821, q275508,
Q160900 on the MS knowledge base site as mentioned
in the earlier emails on the list, but they all
seem to list problems with a 2k domain, not a NT
domain as is the case with our servers. Most of the other
articles on the technet site also seem to talk more about
2k servers than NT - with respect to this issue.

2. There are no processes running under the user credentials
at startup.

3. And yes, it happens with all the users and I mean right
from the admins to anyone in the users group. No class
distinctions with MS :)

If there is still some ambiguity, shoot me back an
email at this address.

Thanks,
Barath


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com