Re: User Account Repeatedly locks-up

Try to check date & clock in your user's PC, make sure it's the same with
domain controller


"Gopinathan Kannan [MS]" <gkannan@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:eLtDLGBlGHA.5036@xxxxxxxxxxxxxxxxxxxxxxx
Account lockout typically happens when multiple invalid logon attempts
(such as due to bad password) are made above a predefined threshold. The
threshold can be defined by the "Account Lockout Policy" in your domain
policy setting (under administrative tools) or local security settings (if
a workgroup machine). One way to track down the issue would be to turn on
auditing for "logon events" for that user.

Run secpol.msc as administrator
Navigate to Security Settings > Local Policies > Audit Policy
Open "Audit logon events" policy property page
Select both "success" and "failure"

When the issue happens again, log into the machine as an local admin and
open the event viewer (eventvwr.msc) and look at the failed logon
attempts, if any and associated data (failure reason code, etc).

Gopinathan Kannan [MSFT]


<joel.alonzo@xxxxxxxxx> wrote in message
news:1150725211.724616.319520@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
We are having issues with one of our users, where his user account get
locked constantly. He can check his email one minute and then the next
he is locked out. This is not the first time this has happend, it even
happened to me. We just figured it was someone trying to log in as us.
Anyone have any suggestions? poor guy can't get any work done because
he gets locked out every couple of minutes. Thanks




.

Relevant Pages

  • Re: Group policy - another newbie question
    ... Domain Controller Security Policy is exactly that. ... (just the security settings) ... navigate to the Group Policy tab and edit the Default Domain ...
    (microsoft.public.win2000.group_policy)
  • Re: Problems since SP1 (Server 2003) - 2nd request for help
    ... this would be the Default Domain Controllers Policy [Security Settings section]. ... The easiest way to edit it is to Open Administrative Tools, and double-click the Domain Controller Security Policy. ...
    (microsoft.public.windows.terminal_services)
  • Re: Default Domain Security Settings and DC Security Settings
    ... Security settings applied at the domain level shouldn't be ... level is independant of the policy. ... >> The Default Domain Controller Policy applies to the Domain Controllers ... >>> the domain, member servers, DCs, and member client machines. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.setup_deployment)