Account lockout effects local logon to machine

From: rod (rodneybarton0@hotmail.com)
Date: 10/23/02 

From: "rod" <rodneybarton0@hotmail.com>
Date: Wed, 23 Oct 2002 05:31:04 -0700

We also have this issue, however we have gotten around it
for the time being by getting the user to pop a reminder
in his calendar to change his password before it expires
whilst he is VPN'ing. He logs into the domain at least 3
times a week. However, this may not help in your case as
they hardly log onto the domain.

Please let me know if you come across something better.

thanks

>-----Original Message-----
>We support a number of remote users who dial in over VPN
>and hardly ever log on physically to the domain (twice
>yearly if that).
>
>The problem we are having is that if their domain account
>expires and requires a password change which is set to
>every 30 days, (User Must Change Password At Next Logon)
>they cannot even log on locally to their machines using
>cached information (as they could forever and a day with
>NT4). I guess this is Windows 2000 being 'intelligent'
and
>knowing when their account is going expire and not
>allowing them to log on locally. This, I suppose, is for
>security.
>
>My question is this, how can we stop this from happening,
>is there a registry 'hack' to prevent it ? We have spent
>numerous hours on the phone with them having them logging
>on as local Administrator, creating themselves a local
>account and using that instead.
>
>If there isn't a 'hack'/ fix, anyone have any suggestions
>on how we can support them properly ??
>
>Many thanks.
>
>.
>

Relevant Pages

  • Account lockout effects local logon to machine
    ... >in his calendar to change his password before it expires ... >>We support a number of remote users who dial in over VPN ... >>knowing when their account is going expire and not ... >>on as local Administrator, creating themselves a local ...
    (microsoft.public.win2000.security)
  • Account lockout effects local logon to machine
    ... We support a number of remote users who dial in over VPN ... The problem we are having is that if their domain account ... on as local Administrator, creating themselves a local ...
    (microsoft.public.win2000.security)
  • Re: Product ID For Online Support
    ... >Not sure about support for the Home Use program since it ... >account will be deleted without reading. ... As I mentioned in my thread, OE and Outlook ...
    (microsoft.public.office.misc)
  • Re: Password expires for no apparent reason
    ... the minimum password age is there to prevent users from blowing ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ... Nice to hear from you Mr. Brian Delaney long time no chat. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Why should we disable local administrator accounts?
    ... I understand that you have concerns on disabling local Administrator ... Account on client workstations in SBS domain. ... At least if your local admin passwords are ...
    (microsoft.public.windows.server.sbs)