Re: Password account Lockout. Help !!
From: Steven L Umbach (n9rou_at_nsattbi.com)
Date: 06/28/03
- Next message: Kevin: "TSWEB vs. VPN"
- Previous message: Steven L Umbach: "Re: Password account Lockout. Help !!"
- In reply to: Steven L Umbach: "Re: Password account Lockout. Help !!"
- Next in thread: J^GNOB: "Password account Lockout. Help !!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 27 Jun 2003 23:00:28 GMT
I need to add that I was assuming that XP computers have default
security settings. If any of them have been changed such as "require
digitally signed communications or secure channel", then that would be
suspect also. --- Steve
"Steven L Umbach" <n9rou@attbi.com> wrote in message
news:sM3La.39466$e26.22587@rwcrnsc52.ops.asp.att.net...
> There are some issues with XP in a W2K domain. The biggest relates
to
> incompatibility of smb signing - you may want to disable all four
"digitally
> sign communications" options until problem is resolved, and also the
secure
> channel: digitally sign/encrypt if nothing else helps. I would first
suggest
> running netdiag on one of the XP computers to see what it reports and
review
> event viewer on clients and domain controller after enabling account log
on
> events on domain controller and log on events on some of the XP
> workstations. Also make sure the XP ICF firewall or other personal
firewall
> on those computers are disabled until problem is resolved, if using any.
> Another issue is the security option "additional restrictions for
anonymous
> connection". Try setting that to - none, rely on default permissions until
> problem is resolved and then change it to no more than do not allow
> enumeration of shares/accounts. It is also possible in some cases that lan
> manager authentication level may need to be backed down a bit to say -
send
> ntlmv2 responses only until problem is resolved. Sometimes kerberos needs
to
> be forced to use TCP instead of UDP in mixed networks - netdiag errors or
> event viewer may give clues on that. See KB articles for more info and let
> us know if anything helped. --- Steve
>
> http://www.brienposey.com/kb/XP_Network_Problems.asp -- Smb issues.
> http://support.microsoft.com/?kbid=246261 -- Also known to cause problems
> with XP.
> http://support.microsoft.com/?kbid=244474 -- Kerberos issues.
>
>
> "Andy" <aserventich@hotmail.com> wrote in message
> news:egGmI0LPDHA.1608@TK2MSFTNGP11.phx.gbl...
> > I have a W2K domain and workstations are W2K Professional and there are
> > others with Win-XP.
> > Every time a user change his/her password(our domain policy is to change
> > password once a month), the account locks out, but this only happends
with
> > Win-XP clients.
> > We try restarting the computer, unlock the account and the user can logs
> on,
> > but
> > again the account locks out, and so on.
> > Can anyone help me ?
> >
> > Thank you
> >
> >
>
>
- Next message: Kevin: "TSWEB vs. VPN"
- Previous message: Steven L Umbach: "Re: Password account Lockout. Help !!"
- In reply to: Steven L Umbach: "Re: Password account Lockout. Help !!"
- Next in thread: J^GNOB: "Password account Lockout. Help !!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
