Re: Accounts constantly locking out

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/03/04


Date: Wed, 03 Nov 2004 05:17:39 GMT

You can increase the account lockout threshold in "Domain Security Policy"
where it should be no less than ten bad attempts assuming you are not
allowing weak passwords. Other than fumble fingers common causes of lockouts
are users being logged onto multiple computers, using mapped drives with
persistent connections, and having user account used for service or
Scheduled Task and not changing those passwords also. Open Domain Security
Policy and go to security settings/ account policies/account lockout policy
and set the account lockout threshold to at least ten. The link below may
help if the problem persists with the associated tools and referenced white
paper.. --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

"William Hymen" <t18_pilot@hotmail.spam.com> wrote in message
news:uekEZIUwEHA.2172@TK2MSFTNGP14.phx.gbl...
>I have a two-node Active Directory domain, which I use for change control.
> On these, I have created 400 shares and 200 ID's for dropping-off;
> promoting; and picking-up
> software.
> I create user ID's and permission the ID to the share and the folder.
> The developers drop off the code; and the installers pick it up
> during our green-zone. It has worked well for 5 years... almost!
>
> My users are constantly locking their ID's out; which I then have to
> endlessly connect with telnet and "net user JoeSmith /active:yes "
> to restore the account. No amount of training seems to help,
> and they always seem to map-network-drive and lock themselves out again.
>
> How can I increase the number of failed netbios connections before
> lockouts?,
> or better yet, why does this happen so much?
>
> Thanks in advance-
>
> Bill
>
>



Relevant Pages

  • Re: Accounts constantly locking out
    ... You can increase the account lockout threshold in "Domain Security Policy" ... > How can I increase the number of failed netbios connections before ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Account Lockout threshold
    ... necessary functionality identified under name PDC emulator ... Microsoft MVP (Windows Server: Security) ... > Domain Contoller Security Policy - Account lockout threshold ...
    (microsoft.public.security)
  • Account Lockout Threshold
    ... We have a default policy with the account lockout threshold set to 3 ... This policy applies to the entire domain. ... We also have a generic user that gets used for a few kiosks, ...
    (microsoft.public.win2000.security)
  • Account Lockout Threshold Not Working
    ... On my DC, in Domain Security Policy... ... Settings, Security Settings, Account Policies, the ... Account Lockout Threshold is set for 5 invalid attempts. ...
    (microsoft.public.win2000.security)