Account Locked out after Password Change

[Jas Singh]

Hello All,

I am wondering if anyone else has experienced this
problem. I have a group policy in place on the domain
level for password change after 180 days. The password
part of the policy seems to be working fine however, when
a user changes his/her password based on this policy the
account gets locked out and I have to reset the account.
Is their any solution to prevent the account from getting
locked out after a password change?

Thanks,

 

[Edward B. Hethcote]

Acount lockouts after a password changer are most often caused by:

1. user logged on in more than one place - need to log off all sessions
prior to changing password
2. some service account using the old user credentials.

If clients are 2000, enable Kerberos logging and check for the unsuccessful
logon attempts. If you see several attempts in a send or two, it's probably
a service account

If clients are pre-2000, enqable netlogon logging and search for 0xc000006a
(bad logon atempt) and 0xc0000234 (account locked out) and check the times
on the bad attampts and lockout

EBH