RE: account lockout problems

From: bdoub (ntbug2000@yahoo.com)
Date: 03/20/02 

From: "bdoub" <ntbug2000@yahoo.com>
To: "Markgraf, Frank" <frank.markgraf@ltg-mailaender.de>, "Focus-Ms@Securityfocus. Com" <focus-ms@securityfocus.com>
Date: Wed, 20 Mar 2002 17:28:39 +0530

The account gets 'locked'. After this, typically, we have to de-select the
"user account is locked" checkbox in the user-mgr and reset the password to
allow access to the user again.

Thanks,
Barath

-----Original Message-----
From: Markgraf, Frank [mailto:frank.markgraf@ltg-mailaender.de]
Sent: Wednesday, March 20, 2002 2:06 PM
To: 'bdoub'; Markgraf, Frank; Focus-Ms@Securityfocus. Com
Cc: barath.br@ajubanet.net
Subject: AW: account lockout problems

Is the account really locked or can't the user successfully logon? If the
account isn't locked it seems to be an syncronisation problem with the DCs

Frank

-----Ursprüngliche Nachricht-----
Von: bdoub [mailto:ntbug2000@yahoo.com]
Gesendet: Mittwoch, 20. März 2002 04:53
An: Markgraf, Frank; Focus-Ms@Securityfocus. Com
Cc: barath.br@ajubanet.net
Betreff: RE: account lockout problems

Yes, the "user must logon before password change" is activated. But that
just makes the difference once the account gets locked out. I am much more
interested in finding out why the account gets locked out in the first
place.

Thanks,
Barath

-----Original Message-----
From: Markgraf, Frank [mailto:frank.markgraf@ltg-mailaender.de]
Sent: Tuesday, March 19, 2002 10:23 PM
To: 'bdoub'; Focus-Ms@Securityfocus. Com
Cc: barath.br@ajubanet.net
Subject: AW: account lockout problems

Hi,

Is it possible that you activated the "user must logon bevore pasword
change" key? We have the same problem on some workstations and i think the
cause is the syncronisation between the domain controllers.

mit freundlichen Grüssen

Frank Markgraf
LTG Mailänder GmbH

Tel. +49 711 8201 9156
frank.markgraf@ltg-mailaender.de

Wernerstrasse 119-129
70435 Stuttgart

-----Ursprüngliche Nachricht-----
Von: bdoub [mailto:ntbug2000@yahoo.com]
Gesendet: Dienstag, 19. März 2002 03:27
An: Focus-Ms@Securityfocus. Com
Cc: barath.br@ajubanet.net
Betreff: account lockout problems

Need some help folks,

Server : NT 4.0 sp6a
Clients: win2k prof sp2

Problem Description:
Account policies is setup to change passwords once
in 'X' days with a password history setup.

User gets prompted to change password when
nearing the deadline. User hits 'yes - change
password now' - account gets locked out. Instead if
the user hits 'no - will change password later' and hits ctrl-alt-del and
chooses 'change password' option, the user is able to change the password.

Please Note:
1. I have already looked at articles q263821, q275508,
Q160900 on the MS knowledge base site as mentioned
in the earlier emails on the list, but they all
seem to list problems with a 2k domain, not a NT
domain as is the case with our servers. Most of the other articles on the
technet site also seem to talk more about 2k servers than NT - with respect
to this issue.

2. There are no processes running under the user credentials
at startup.

3. And yes, it happens with all the users and I mean right
from the admins to anyone in the users group. No class distinctions with MS
:)

If there is still some ambiguity, shoot me back an
email at this address.

Thanks,
Barath

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Relevant Pages

  • RE: account lockout problems
    ... the "user must logon before password change" is activated. ... just makes the difference once the account gets locked out. ... Subject: AW: account lockout problems ... User hits 'yes - change ...
    (Focus-Microsoft)
  • Re: OE & Yahoo Mail
    ... I receive mail from 4 yahoo accts on my PC, ... YahooPOPs *emulates* UIDL by using the message-ID from the URL returned ... unique for the life of a freebie Yahoo webmail account but it has been ... incoming mail, which causes me to have to use Port 123 for YPops, on the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: OE & Yahoo Mail
    ... I receive mail from 4 yahoo accts on my PC, ... YahooPOPs *emulates* UIDL by using the message-ID from the URL returned ... unique for the life of a freebie Yahoo webmail account but it has been ... incoming mail, which causes me to have to use Port 123 for YPops, on the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Help with OE 6/IE 7
    ... Have you obtained new email addresses from Yahoo and TDS? ... OE stops responding whenever I switch to it, ... I haven't tried uninstalling IE7, ... If you add the TDS account to the first identity above (the one running ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: [Full-disclosure] Yahoo recommends you write down account information
    ... Like I marked up earlier in this thread, its not about how an account would ... The highlight of the thread is that once again i've proved Yahoo does not ... way they don't take the threat of folks following folks home to break into ... MARK, you're Yahoo's top security advisor, and I respect you off ...
    (Full-Disclosure)
Quantcast