Re: Password account Lockout. Help !!

From: Steven L Umbach (n9rou_at_attbi.com)
Date: 06/28/03 

Date: Fri, 27 Jun 2003 22:43:36 GMT

      There are some issues with XP in a W2K domain. The biggest relates to
incompatibility of smb signing - you may want to disable all four "digitally
sign communications" options until problem is resolved, and also the secure
channel: digitally sign/encrypt if nothing else helps. I would first suggest
running netdiag on one of the XP computers to see what it reports and review
event viewer on clients and domain controller after enabling account log on
events on domain controller and log on events on some of the XP
workstations. Also make sure the XP ICF firewall or other personal firewall
on those computers are disabled until problem is resolved, if using any.
Another issue is the security option "additional restrictions for anonymous
connection". Try setting that to - none, rely on default permissions until
problem is resolved and then change it to no more than do not allow
enumeration of shares/accounts. It is also possible in some cases that lan
manager authentication level may need to be backed down a bit to say - send
ntlmv2 responses only until problem is resolved. Sometimes kerberos needs to
be forced to use TCP instead of UDP in mixed networks - netdiag errors or
event viewer may give clues on that. See KB articles for more info and let
us know if anything helped. --- Steve

http://www.brienposey.com/kb/XP_Network_Problems.asp -- Smb issues.
http://support.microsoft.com/?kbid=246261 -- Also known to cause problems
with XP.
http://support.microsoft.com/?kbid=244474 -- Kerberos issues.

"Andy" <aserventich@hotmail.com> wrote in message
news:egGmI0LPDHA.1608@TK2MSFTNGP11.phx.gbl...
> I have a W2K domain and workstations are W2K Professional and there are
> others with Win-XP.
> Every time a user change his/her password(our domain policy is to change
> password once a month), the account locks out, but this only happends with
> Win-XP clients.
> We try restarting the computer, unlock the account and the user can logs
on,
> but
> again the account locks out, and so on.
> Can anyone help me ?
>
> Thank you
>
>

Relevant Pages

  • Re: Password account Lockout. Help !!
    ... digitally signed communications or secure channel", ... > event viewer may give clues on that. ... >> again the account locks out, ...
    (microsoft.public.win2000.security)
  • Re: repeat lockout of Win2000
    ... Check the security audits in event viewer. ... > About every 30 minutes my account locks itself, ... What scenarios would make this ...
    (microsoft.public.win2000.security)