Account Locked out for No reason!

[Guest]

Hello all!


I hope this is in the right place!!


we run a sbs2000 enviroment with a mix of win XP and win2000 PCs.


When a XP user logs onto a Win 2000 PC and then trys to sign in to IIS
on a remote workgroup running windows 2000 server his local domain
account keeps getting locked out!


I have tested that user ability to log on to the same remote pc from a
XP machine and all is fine - ie he does not get locked out.


SO the conclusion is that there must be some problem with the win 2000
o/s.


can anybody help me stop this from happening as he has to logged on to
the two pc several times a day and it is becoming very annoying having
to unlock him!!


It has only just started happening in the last few days. he has been
using this setup for months with no trouble! so why has this started to

happen now?


The remote IIS PC is behind a PC firewall, the PC is running win2003
running ISA 2000.


PLEASE help!!!


ta


Andrew

 

[Chris Dugan]

Andrew,

turn on account auditing for logon failures and you should have a better
idea of why this is happening from what shows up in the server security
event log.

One thing that springs to mind is have any security patches or updates been
applied to either the IIS machine or Win2k pc recently?

Chris

 

[Guest]

I am not in charge of the IIS machine but i know it was rebooted due to
updates on the morning all this started. i am not sure what updates
were installed though!

The W2K machine has not been updated near the time this all started!

also the user recenlty changed his local domain password a week or so
before this all started.


cheers

Andrew

 

[Bob I]

Have user change password back to the old one while they try to remember
what they set up to automatically load/or do with the old password. See
task scheduler for clues.