problems with a domain admin account

From: Sandra L Miller (slm@cs.arizona.edu)
Date: 05/31/02 

Date: Thu, 30 May 2002 15:31:04 -0700
From: Sandra L Miller <slm@cs.arizona.edu>

Help please.

We have a Windows domain, with 2 domain controllers running Windows
2000, and 200+ workstations running mostly Windows 2000 (one NT and
some XPs). As per Microsoft's recommendation, we changed the name
of the original Administrator account to something else (call it ad1)
and rarely use the account. We created a second administrator account
(call it ad2) which we use daily for administration. We have always
changed the password for ad2 monthly.

The problem...
Recently, we have been having problems when we change the password
for ad2. The account becomes locked out, over and over. I keep
unlocking it, using the ad1 account, but after 15-20 minutes, it is
locked out again. We don't have a policy in place to lock out accounts
after x number of failed login attempts, so I don't THINK that's the
problem. Does anybody have any ideas? My boss is getting annoyed at
me :-( (he can't ever remember the password for ad1).

Thanks for any help. 

-- 
Sandra L Miller
Department of Computer Science
University of Arizona

Relevant Pages