RE: account lockout problems

From: bdoub (ntbug2000@yahoo.com)
Date: 03/20/02 

From: "bdoub" <ntbug2000@yahoo.com>
To: <fh@rcs.urz.tu-dresden.de>, "bdoub" <ntbug2000@yahoo.com>
Date: Wed, 20 Mar 2002 17:28:27 +0530

Oops, my mistake.

This occurs only with the domain accounts. The local accounts do not have
the same problems.

Thanks,
Barath

-----Original Message-----
From: Frank Heyne [mailto:fh@rcs.urz.tu-dresden.de]
Sent: Wednesday, March 20, 2002 1:50 PM
To: bdoub
Subject: RE: account lockout problems

Did you verify this appearance with the event logs (local and DCs)?
Is the policy the same on WS and DC?
Where is the answer regarding local vs domain accounts?

On 20 Mar 2002, at 9:26, bdoub wrote:

> The account policy is set to lock the account after 3 logins. But here, it
> appears to be locked out at the first login itself.
>
> Thanks,
> Barath
>
> -----Original Message-----
> From: Frank Heyne [mailto:fh@rcs.urz.tu-dresden.de]
> Sent: Tuesday, March 19, 2002 10:52 PM
> To: bdoub
> Subject: Re: account lockout problems
>
>
> 4 Questions:
> What does account lockout policy say?
> How many times is a wrong password allowed until the account locks out
> ... in theory?
> ... in practice?
> Is your problem only with domain accounts or with local accounts as
> well?
>
> On 19 Mar 2002, at 7:56, bdoub wrote:
>
> > Need some help folks,
> >
> > Server : NT 4.0 sp6a
> > Clients: win2k prof sp2
> >
> > Problem Description:
> > Account policies is setup to change passwords once
> > in 'X' days with a password history setup.
> >
> > User gets prompted to change password when
> > nearing the deadline. User hits 'yes - change
> > password now' - account gets locked out. Instead if
> > the user hits 'no - will change password later' and hits
> > ctrl-alt-del and chooses 'change password' option,
> > the user is able to change the password.
> >
> > Please Note:
> > 1. I have already looked at articles q263821, q275508,
> > Q160900 on the MS knowledge base site as mentioned
> > in the earlier emails on the list, but they all
> > seem to list problems with a 2k domain, not a NT
> > domain as is the case with our servers. Most of the other
> > articles on the technet site also seem to talk more about
> > 2k servers than NT - with respect to this issue.
> >
> > 2. There are no processes running under the user credentials
> > at startup.
> >
> > 3. And yes, it happens with all the users and I mean right
> > from the admins to anyone in the users group. No class
> > distinctions with MS :)
> >
> > If there is still some ambiguity, shoot me back an
> > email at this address.
> >
> > Thanks,
> > Barath
> >
> >
> > _________________________________________________________
> > Do You Yahoo!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
> >
>
>
>
> Frank Heyne
>
>
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
>

Frank Heyne


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Relevant Pages

  • Re: How to Setup TS User
    ... I'm not sure why you use a dummy account. ... user logs on with personal domain account to local workstation ... Yes all accounts are domain accounts, ... what is the correct process for them to logon ...
    (microsoft.public.windows.terminal_services)
  • Re: Accessing security information from an authentication provider
    ... doesn't seem to work for domain accounts, ... someone disabling or restricting the null account, ... the GetAuthDataForUser only works for machine local ... network shares and such without somehow authenticating to a domain ...
    (microsoft.public.platformsdk.security)
  • Re: Syncing network passwords with local
    ... Their solution is to use domain accounts ... on the local machines, not local accounts. ... > Does anyone know of a way of syncing a local user account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Startup account password must be rekeyed after every windows u
    ... I use domain accounts on my servers with no issues... ... What about my group policy or local policy question? ... Steve ... I would expect the local system account to ...
    (microsoft.public.sqlserver.setup)
  • Re: Problem with ISA 2004 vpn
    ... its like the ISA ... sever is not authenticating the domain accounts. ... "The VPN connection attempt by user domain\user from VPN client IP ... But if I use the local administrator account of the isa server I am able ...
    (microsoft.public.isa)