Account lockout effects local logon to machine

From: Camilla (camilla_ransom@hotmail.com)
Date: 10/23/02


From: "Camilla" <camilla_ransom@hotmail.com>
Date: Wed, 23 Oct 2002 06:11:12 -0700


Thanks for this. The other problem is that they cannot
change their passwords when dialled in "The system cannot
change your password because the xxxx domain is not
available"

How have you got VPN implemented ?

>-----Original Message-----
>We also have this issue, however we have gotten around it
>for the time being by getting the user to pop a reminder
>in his calendar to change his password before it expires
>whilst he is VPN'ing. He logs into the domain at least 3
>times a week. However, this may not help in your case as
>they hardly log onto the domain.
>
>Please let me know if you come across something better.
>
>thanks
>
>
>>-----Original Message-----
>>We support a number of remote users who dial in over VPN
>>and hardly ever log on physically to the domain (twice
>>yearly if that).
>>
>>The problem we are having is that if their domain
account
>>expires and requires a password change which is set to
>>every 30 days, (User Must Change Password At Next Logon)
>>they cannot even log on locally to their machines using
>>cached information (as they could forever and a day with
>>NT4). I guess this is Windows 2000 being 'intelligent'
>and
>>knowing when their account is going expire and not
>>allowing them to log on locally. This, I suppose, is for
>>security.
>>
>>My question is this, how can we stop this from
happening,
>>is there a registry 'hack' to prevent it ? We have spent
>>numerous hours on the phone with them having them
logging
>>on as local Administrator, creating themselves a local
>>account and using that instead.
>>
>>If there isn't a 'hack'/ fix, anyone have any
suggestions
>>on how we can support them properly ??
>>
>>Many thanks.
>>
>>.
>>
>.
>



Relevant Pages

  • Account lockout effects local logon to machine
    ... in his calendar to change his password before it expires ... >We support a number of remote users who dial in over VPN ... >The problem we are having is that if their domain account ... >on as local Administrator, creating themselves a local ...
    (microsoft.public.win2000.security)
  • Account lockout effects local logon to machine
    ... We support a number of remote users who dial in over VPN ... The problem we are having is that if their domain account ... on as local Administrator, creating themselves a local ...
    (microsoft.public.win2000.security)
  • Re: Product ID For Online Support
    ... >Not sure about support for the Home Use program since it ... >account will be deleted without reading. ... As I mentioned in my thread, OE and Outlook ...
    (microsoft.public.office.misc)
  • Re: Password expires for no apparent reason
    ... the minimum password age is there to prevent users from blowing ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ... Nice to hear from you Mr. Brian Delaney long time no chat. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Why should we disable local administrator accounts?
    ... I understand that you have concerns on disabling local Administrator ... Account on client workstations in SBS domain. ... At least if your local admin passwords are ...
    (microsoft.public.windows.server.sbs)