Re: Please help. EventID 529 locking out my machine.
From: Chris Kimmel (cdkimmel_at_yahoo.com)
Date: 05/06/03
- Next message: C.D.Mohatta: "SARS-Is Microsoft totally helpless?"
- Previous message: Robb: "Re: Possible Error in Patch 331953?"
- In reply to: Mike Mercogliano: "Please help. EventID 529 locking out my machine."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 6 May 2003 11:07:02 -0700
That is not the case. The machine where the account is getting locked
out from is getting rebooted. If I turn that machine on and leave it
on, my account will get locked out from that machine.
"Mike Mercogliano" <mikemerc@us.ibm.com> wrote in message news:<020801c31339$1762cb40$a301280a@phx.gbl>...
> Let's think about this. If your account is getting locked
> out in AD, than you can't be logging in with an "Unknown
> user name" because the system wouldn't know which account
> in AD to lockout, right. So, let's assume in is a "bad
> password". I have found in my environment that sometimes
> users login at more than one workstation at once and
> either stayed logged in or forget that they are logged
> in. Then on the machine they are currently trying to
> login on their password expires. They change their
> password but the workstation that they have been logged on
> from days ago still thinks the password for the account is
> still the old password. It tries to re-authenticate not
> knowing the password has changed over and over and locks
> out the account over and over until you track down the
> workstation you are logged onto. In some cases more than
> one workstation. If this is the case, reboot it and all
> workstations you are logged into with the account being
> locked out and your problem will be resolved.
>
> -Mike
>
>
> >-----Original Message-----
> >I am receiving the below security event. I have checked
> all services
> >and none are logging in with the account that is getting
> locked out.
> >I know it's specific to this machine because my account
> only get's
> >locked out when this machine is on. I have also looked
> into any
> >startup apps and those shouldn't cause problems either.
> I have also
> >removed all references to mapped drives.
> >
> >Event Type: Failure Audit
> >Event Source: Security
> >Event Category: Logon/Logoff
> >Event ID: 529
> >Date: 5/5/2003
> >Time: 10:19:00 AM
> >User: NT AUTHORITY\SYSTEM
> >Computer: [my computer]
> >Description:
> >Logon Failure:
> > Reason: Unknown user name or bad password
> > User Name: [my login]
> > Domain: [my domain]
> > Logon Type: 4
> > Logon Process: Advapi
> > Authentication Package: Negotiate
> > Workstation Name: [my computer]
> >
> >For more information, see Help and Support Center at
> >http://go.microsoft.com/fwlink/events.asp.
> >.
> >
- Next message: C.D.Mohatta: "SARS-Is Microsoft totally helpless?"
- Previous message: Robb: "Re: Possible Error in Patch 331953?"
- In reply to: Mike Mercogliano: "Please help. EventID 529 locking out my machine."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
