Re: Account lockout
From: Jeff A. (bubblegoose121@hotmail.com)
Date: 04/17/03
- Next message: jim: "tracking cookies"
- Previous message: Freeda Heatherly: "Preventing File-Save As"
- In reply to: Bob: "Re: Account lockout"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: bubblegoose121@hotmail.com (Jeff A.) Date: 17 Apr 2003 13:05:27 -0700
I have found the answer to this, I just called MS PSS and here is a
copy of what I sent to my co-workers
XP and Stored User Names and Passwords
The problem is with this "feature".
The deal is, XP stores different credentials that were used for
different servers. For the life of me, I don't know why the hell
someone would want this, it seems like an opportunity to open up a
gaping security hole. Let's say I went to machine and wanted to act as
another user, this "feature" would store the username and password I
used, it would not prompt me again for a password.
To change the password that XP stores go to start/run and type control
keymgr.dll (that's the shortcut, the long way is Control Panel, User
Accounts, advanced, manage passwords)
Click on seville.stk.com and click properties.
Server should be seville.stk.com
User name should be agi\username
Password: Enter the new password here (the domain password that was
changed previously)
Click OK, when prompted to update the domain, click NO.
The stop this feature go to HKEY_LOCAL_MACHINE\SYSTEM\CURRENT CONTROL
SET\CONTROL\LSA set disabledomaincreds to 1
http://support.microsoft.com/?kbid=281660
http://support.microsoft.com/default.aspx?scid=kb;EN-US;281249
"Bob" <brenda@hotmail.com> wrote in message news:<04bf01c2fabc$bff782e0$a601280a@phx.gbl>...
> Thank you Dmitry and Robert. I was thinking it was
> something possibly with Exchange myself (seeing Outlook
> validates it's login through the Windows acccount). I
> thought somehow, Outlook may be holding on to a cache
> version of the old password. I'll check to make sure the
> users are NOT already logged on one machine while trying
> to log in on another.
> -Bob
> >-----Original Message-----
> >
> >"Bob" <brenda@hotmail.com> wrote in message
> >news:05e301c2f952$c439c4f0$3001280a@phx.gbl...
> >> I've noticed some end users get locked out of their
> >> accounts after they reset their passwords on a Win2K
> >> professional workstation. If their password gets reset
> >> through active directory users and computers, they are
> >> all set; but when they reset it themselves (CTRL-ALT-
> >> DEL, "change password") it becomes locked. We have SP3
> on
> >> all the workstations and servers. Any ideas? Thanks
> >
> >In addition to Dmitry's advice, I've also seen this
> happen when they run
> >applications that validate your windows credentials
> again in order to use
> >things like SQL or Exchange or other similar products.
> >
> >
> >.
> >
- Next message: jim: "tracking cookies"
- Previous message: Freeda Heatherly: "Preventing File-Save As"
- In reply to: Bob: "Re: Account lockout"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
