Re: account lock out
From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 01/24/03
- Next message: Karl Levinson [x y] mvp: "Re: Quota does not match users folder size"
- Previous message: Gdiaz: "Re: NEED HELP"
- In reply to: Juan Carlos: "account lock out"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com> Date: Fri, 24 Jan 2003 09:16:56 -0500
There are a number of things that can cause this:
- user just changed her password recently, AND:
- she is also logged into Windows on another computer;
- she has drives that are mapped within Windows Explorer instead of
through the login script;
- there is a Windows 2000 / XP / NT service set to log in as her with an
old password.
The above happens because Windows caches the old password and retries
logging in using that old password three or more times in a few seconds.
The fix would be to prevent this from happening through user education.
I might also search www.microsoft.com/support for the error message the user
is receiving, especially if this is Windows 98. I think there are some
additional bugs affecting Windows 98 on this.
Enabling auditing may in some cases help determine where the lockout is
coming from:
http://securityadmin.info/faq.htm#auditing
"Juan Carlos" <jore@comexperu.org.pe> wrote in message
news:046901c2c330$c9b760c0$d2f82ecf@TK2MSFTNGXA09...
> Me too. Some users suddenly got locked out without any
> reason. I searched in the
> event viewer and found this:
>
> ***********************
> Date: 21/01/2003 Source: Security
> Time: 15:14 Category: Logon/Logoff
> Type: Failure Event ID: 529
> User: NT AUTHORITY\SYSTEM
> Computer: COMEXCENTRAL
>
> Logon Failure:
> Reason: Unknown user name or bad
> password
> User Name: jore
> Domain: COMEX
> Logon Type: 2
> Logon Process: Advapi
>
> Authentication Package:
> MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
>
> Workstation Name: COMEXCENTRAL
>
> **********************
>
> Where COMEXCENTRAL is the PDC and I'm using W2K. This
> event repeats aprox. 5 times in a second and blocked the
> account. I had cheked fro scheduled tasks that may cuase
> this problem but i didn't found nothing.
>
> I'm thinking of this as an attack, but I'm not really
> sure of that.
>
> >-----Original Message-----
> >I seem to be having the same problem, it happens right
> >after a user changes their password. The only way I
> have
> >found to fix it is to delete their profile (both the
> >cached copy on their workstation and the one on the
> >server). Then everything seems to work normal until
> they
> >have to change their password again.
> >
> >Does anyone have a solution that doesn't involve
> deleting
> >their profiles?
> >
> >
> >>-----Original Message-----
> >>I am haveing a problem with users getting locked out
> for
> >>no apparant reason and it is not logged in event viewer
> >>that the users account failed to log on. Sometimes the
> >>users can not log into their Outlook account even
> though
> >>they are logged on the network. I am running 2000
> >Server
> >>on the network and the problem happens to either 2000
> >pro
> >>or XP pro clients.
> >>
> >>Thank you,
> >>
> >>C. Van Derbilt
> >>.
> >>
> >.
> >
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.443 / Virus Database: 248 - Release Date: 1/10/2003
- Next message: Karl Levinson [x y] mvp: "Re: Quota does not match users folder size"
- Previous message: Gdiaz: "Re: NEED HELP"
- In reply to: Juan Carlos: "account lock out"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
