Please help. EventID 529 locking out my machine.

From: Mike Mercogliano (mikemerc_at_us.ibm.com)
Date: 05/05/03 

Date: Mon, 5 May 2003 12:04:02 -0700

Let's think about this. If your account is getting locked
out in AD, than you can't be logging in with an "Unknown
user name" because the system wouldn't know which account
in AD to lockout, right. So, let's assume in is a "bad
password". I have found in my environment that sometimes
users login at more than one workstation at once and
either stayed logged in or forget that they are logged
in. Then on the machine they are currently trying to
login on their password expires. They change their
password but the workstation that they have been logged on
from days ago still thinks the password for the account is
still the old password. It tries to re-authenticate not
knowing the password has changed over and over and locks
out the account over and over until you track down the
workstation you are logged onto. In some cases more than
one workstation. If this is the case, reboot it and all
workstations you are logged into with the account being
locked out and your problem will be resolved.

-Mike

>-----Original Message-----
>I am receiving the below security event. I have checked
all services
>and none are logging in with the account that is getting
locked out.
>I know it's specific to this machine because my account
only get's
>locked out when this machine is on. I have also looked
into any
>startup apps and those shouldn't cause problems either.
I have also
>removed all references to mapped drives.
>
>Event Type: Failure Audit
>Event Source: Security
>Event Category: Logon/Logoff
>Event ID: 529
>Date: 5/5/2003
>Time: 10:19:00 AM
>User: NT AUTHORITY\SYSTEM
>Computer: [my computer]
>Description:
>Logon Failure:
> Reason: Unknown user name or bad password
> User Name: [my login]
> Domain: [my domain]
> Logon Type: 4
> Logon Process: Advapi
> Authentication Package: Negotiate
> Workstation Name: [my computer]
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>.
>

Relevant Pages

  • Re: Trust relationship between this workstation and Primary Domain
    ... it, with a new computer ID, a new workgroup ID, but again to no avail. ... password policy, renamed admin account, automatic updates are controlled by ... * PLEASE post all messages and replies in the newsgroups ... "Workstation ...
    (microsoft.public.win2000.networking)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... account is NEW to the workstation. ... needs admin group priv at workstation level. ... only problem is adding a new user account on the station. ... This would be on the DNS server 172.20.100.2 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... The DNS Zone for your AD Domain must be DYNAMIC, ... Client computer must use STRICTLY the INTERNAL DNS server which can ...
    (microsoft.public.windows.server.active_directory)
  • Joining NT4 to a Windows 2000 domain; secure channel prob?
    ... Trying to logon with a domain account pops up the error: ... The trust relationship between this workstation and the primary ... Searching PDC for domain MYDOMAIN ... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... There were no logged events in either the DC or workstation. ... DC/DNS Server - DCDiag ... Attr: subschemaSubentry ... only problem is adding a new user account on the station. ...
    (microsoft.public.windows.server.active_directory)