Re: problems with a domain admin account

From: Roger Abell (mvpNOSPAM@asu.edu)
Date: 05/31/02 

From: "Roger Abell" <mvpNOSPAM@asu.edu>
Date: Thu, 30 May 2002 18:19:56 -0700

Since only the system will lock out an account you likely do
indeed have a policy set to enable this. This is good.
Your best solution is to seek out and modify the behavior of
what is attempting to use the account (especially as it likely
is and does not need to be a domain admin account). 

--
Roger Abell
MVP (Windows Platform)  Associate Expert
The Expert Zone - www.microsoft.com/windowsxp/expertzone
"Sandra L Miller" <slm@cs.arizona.edu> wrote in message
news:3CF6A828.36EECDB0@cs.arizona.edu...
> Help please.
>
> We have a Windows domain, with 2 domain controllers running Windows
> 2000, and 200+ workstations running mostly Windows 2000 (one NT and
> some XPs).  As per Microsoft's recommendation, we changed the name
> of the original Administrator account to something else (call it ad1)
> and rarely use the account.  We created a second administrator account
> (call it ad2) which we use daily for administration.  We have always
> changed the password for ad2 monthly.
>
> The problem...
> Recently, we have been having problems when we change the password
> for ad2.  The account becomes locked out, over and over.  I keep
> unlocking it, using the ad1 account, but after 15-20 minutes, it is
> locked out again.  We don't have a policy in place to lock out accounts
> after x number of failed login attempts, so I don't THINK that's the
> problem.  Does anybody have any ideas?  My boss is getting annoyed at
> me :-(  (he can't ever remember the password for ad1).
>
> Thanks for any help.
>
> --
> Sandra L Miller
> Department of Computer Science
> University of Arizona

Relevant Pages

  • Re: Connection.IsolationLevel = adXactSerializable and timeout
    ... Yup, I expect a Counton a non PK column can result in a table lock, but ... let's say we have a table named Account: ... > So I create a transaction and wrap the SELECT and INSERT inside it. ... >> get the server to answer that a connection is available. ...
    (microsoft.public.data.ado)
  • Re: Connection.IsolationLevel = adXactSerializable and timeout
    ... let's say we have a table named Account: ... So I create a transaction and wrap the SELECT and INSERT inside it. ... Doesn't INSERT automatically create a table lock? ... > get the server to answer that a connection is available. ...
    (microsoft.public.data.ado)
  • Re: Lock Out a User in Win XP home?
    ... > lock feature of XP is generally useless. ... I do not want to delete the account and probably lose all it's ... > restricted users that can be managed by an admin user ... ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Different ways of locking accounts
    ... Roberto C. Sanchez wrote: ... User accounts may be locked and unlocked with the -l and -u ... account by changing the password back to its previous value. ... -L Lock a user's password. ...
    (Debian-User)
  • Re: Lock Out a User in Win XP home?
    ... > restricted user. ... The lock feature of XP is ... > want to delete the account and probably lose all it's settings even ... > practically every kid has a PC in their room. ...
    (microsoft.public.windowsxp.security_admin)