Re: Account Lockout

From: Robert Fleming (robert.fleming_at_rogers.com)
Date: 06/07/03 

Date: Fri, 06 Jun 2003 23:34:56 -0400

On 6/6/03 10:36 PM, in article 064601c32c9d$aba327f0$a301280a@phx.gbl,
"Craig" <cmanske@houston.rr.com> wrote:

> Vincent,
>
> If these are XP clients there is a new feature in XP that
> will cache passwords for network resources on the local
> desktop. When the users logs in...it tries to use those
> credentials several times before the user ever gets to
> see the desktop come up. My guess would be that all of
> the users that are having this problem have recently
> changed their passwords and the cached password is
> locking them out.
>
> Go to control panel \ Users \ Advanced I believe....
>
> If thats not it look for any drives that are mapped using
> old credentials....or Terminal Server connections that
> may be have an idle session using the old password.
>
> The event logs on your PDC should give you a clue as to
> where the lockouts are coming from.
>
> Good luck,
>
> Craig
>> -----Original Message-----
>> I have a handful of users that experience account
> lockouts
>> every time they try to log in. Even though our default
>> domain policy says they have 5 retries before account
>> lockout, the account locks. Also notice that everytime
>> they log in, the account always says that it has expired
>> even though it is set to never expire.
>>
>> Anyone have any clue about what this is and more
>> importantly, how to fix it?
>>
>> Please advise ASAP.
>>
>> Thanks,
>>
>> Vincent.
>> .
>>
This is not a new feature in Windows XP, but has been part of the Windows NT
technology group since 3.5, its called Cached Account Credentials, and will
only be checked if there is no DC to verify Username/Password.

Relevant Pages

  • Re: FW: Trace of 139 attack?
    ... /complex—Forces passwords to have a mixture of upper ... > the admin account on local logins (physical security ... >> deleting the logs he cannot do it. ... >> ur Server ur logs will ...
    (Focus-Microsoft)
  • Re: Found, a new rootkit
    ... checked the logs and added several dozen more addresses ... Root's account, eh? ... have good passwords. ... Copyright 2006 by Maurice Eugene Heskett, ...
    (Fedora)
  • Re: Cant login in to XP
    ... files (in an Administrator - level account) to a pen-drive from your ... When my XP system boots, it asks me for a user password. ... these passwords were left blank. ... or the Admin account, it says the user is logging in, but logs it ...
    (microsoft.public.windowsxp.general)
  • Re: Cant login in to XP
    ... files (in an Administrator - level account) to a pen-drive from your ... When my XP system boots, it asks me for a user password. ... these passwords were left blank. ... or the Admin account, it says the user is logging in, but logs it ...
    (microsoft.public.windowsxp.general)
  • Re: Account lockouts
    ... for reusable passwords and the AAA infrastructures that rely upon them? ... In that context, account lockout policy -- duration, threshold, lockout ... > cracking attacks. ...
    (microsoft.public.security)
Loading