Account locked out

[2Tian]

One of the user always approached me (at least 2 to 3 times a week) and
claims that his AD account has locked out. What could be the cause?
(User workstation is running Windows XP Pro. SP2)

 

[Harj]

Hi,

There are many ways and many reasons accounts get locked out. I tend
to see it when we have the account lockout threshold set too low but in
your case you seem to only have one client that is getting locked out.
Here are a few causes of lockouts and below you will find links to
tools to help you troubleshoot.

Applications using cached credentials that are stale.
Stale service account passwords cached by the Service Control Manager.
Stale logon credentials cached by Stored User Names and Passwords in
Control Panel.
Scheduled tasks and persistent drive mappings that have stale
credentials.
Disconnected Terminal Service sessions that use stale credentials.
Failure of Active Directory replication between domain controllers.
Users logging into two or more computers at once and changing their
password on one of them.
Any one of the above situations can trigger an account lockout
condition

Account Lockout and Management Tools
http://www.microsoft.com/downloads/...9C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

Account Lockout Tools
http://technet2.microsoft.com/Windo...c4aa-4e0d-b5bc-cb14c7ff69cd1033.mspx?mfr=true

Good luck

Harj Singh
Asset Management done right
www.specopssoft.com

 

[Herb Martin]

One of the user always approached me (at least 2 to 3 times a week) and
claims that his AD account has locked out. What could be the cause?
(User workstation is running Windows XP Pro. SP2)

Read Harj's message carefully.

This user either has a batch file/config (remote desktop) with the
wrong hard coded credentials, or is under attack from someone,
OR can't type his password accurately.

Something is entering his password incorrectly.