account lockout problem

[Support]

Hi, I am having a very odd and frustrating problem that I cannot resolve:
Server: SBS2k sp 3
Client: XP Pro
Recently returned from holiday and went to login however my account was
locked out. No problem and unlocked it - worked througout the day accessing
network drives and had outlook open constantly. Next day same problem and I
am continually getting locked out every five minutes or so. This does not
appear to effect my ability to browse to network drives on the SBS however
on an NT box I have I cannot access the drives but on another I can. If I
close outlook and then try and re-open, I cannot as the account has been
locked out.

So I have checked the logs as I was concerned that someone may have been
trying to log in illegally. Security log does not tell me anything however
in the system log I am getting multiple warning error 3034 with source
mrxsmb every 5 mins The word error is C0000234 which is Account_locked_out.
This is also not connected with my pc as I have shutdown and disconnected my
pc but am still getting the errors every 5 mins

On checking google/ eventid.net and technet, I found some info on this error
and have acted on some of the suggestions:
1) Have tried rejoining domain (workgroup first then rejoin) - failed
2) Tried renewing IP address and deleting DNS record for my IP address
in reverse lookup table but failed.
3) As advised by eventid.net, ran a network capture to capture and
analyse packets. I have captured and filtered the smb packets however I
cannot seem to find the correct error. I suspect because my final filtering
is incorrect. I am filtering on SMB generated between ANY and my server. I
would like to add an smb expression filter to try and find out which pc
could be generating the error however I have not managed to find it

I've hit a brick wall on this - can anyone offer any suggestions other than
re-creating my account? This does not apppear to affect other users on my
network

Thanks
Rob

 

[Pegasus \(MVP\)]

Hi, I am having a very odd and frustrating problem that I cannot resolve:
Server: SBS2k sp 3
Client: XP Pro
Recently returned from holiday and went to login however my account was
locked out. No problem and unlocked it - worked througout the day accessing
network drives and had outlook open constantly. Next day same problem and I
am continually getting locked out every five minutes or so. This does not
appear to effect my ability to browse to network drives on the SBS however
on an NT box I have I cannot access the drives but on another I can. If I
close outlook and then try and re-open, I cannot as the account has been
locked out.

So I have checked the logs as I was concerned that someone may have been
trying to log in illegally. Security log does not tell me anything however
in the system log I am getting multiple warning error 3034 with source
mrxsmb every 5 mins The word error is C0000234 which is Account_locked_out.
This is also not connected with my pc as I have shutdown and disconnected my
pc but am still getting the errors every 5 mins

On checking google/ eventid.net and technet, I found some info on this error
and have acted on some of the suggestions:
1) Have tried rejoining domain (workgroup first then rejoin) - failed
2) Tried renewing IP address and deleting DNS record for my IP address
in reverse lookup table but failed.
3) As advised by eventid.net, ran a network capture to capture and
analyse packets. I have captured and filtered the smb packets however I
cannot seem to find the correct error. I suspect because my final filtering
is incorrect. I am filtering on SMB generated between ANY and my server. I
would like to add an smb expression filter to try and find out which pc
could be generating the error however I have not managed to find it

I've hit a brick wall on this - can anyone offer any suggestions other than
re-creating my account? This does not apppear to affect other users on my
network

Thanks
Rob

If your machine is on a network - disconnect it from the network
and see if you still get locked out while in island mode. Make
sure to disconnect it from the Internet too!

If your machine is not on a network - stop the Task Scheduler
and see if you still get locked out.
(net stop "Task Scheduler" will do it)

 

[Ray at]

Do you have a scheduled task setup with old credentials?

Ray at work

 

[Mat]

Have there been any changes to group policy made?

 

[Support]

Pegasus - I have already disconnected off the network and shutdown my pc so
it is not connected to that but thanks anyway.
Ray - so simple yet so effective - that is the one thing that has slipped my
mind! I will have a hunt round and see if I can source that
cheers

 

[Support]

Hi Mat,
unfortunately not. I have opened a incident with PSS so hope to get this
resovled and posted.
Thanks