Accounts locked out randomly

[SP]

I've been searching a lot on this issue but I can't find a good answer. We
have an OU where people have to change their password every 45:th day. After
they have changed their password some the user accounts become locked every
day. Previous "fixes" from other admins has been to rename the accounts
after they have hanged their passwords but these accounts still get locked
randomly during the 45 day period before they change the password.

Another strange thing is that this only happens to 4-5 accounts out of a
total 50 at a time and it's not the same accounts are affected each period,
i e the problem dissappears from one account and another account gets the
problem. I'm a new admin to this AD but they've told me it's been like this
for a long time and they have been unable to solve it.

I have enabled logging of failed logons now but I'm putting this question
here as well in case some of you recognizes it.

 

[Paul Bergson]

Are the users logged into more than one machine? Usually what happens is a
user has mapped drives to a resource from one machine, on a different
machine he changes his password and then the first machine attempts to stay
mapped to a drive and the password is no longer correct and eventually locks
the user out.

To help try and track down where the account is getting locked out use
eventcomboMT.exe from the Account Lockout tools found out Microsoft's
website. Use the built in search AccountLockouts and search in the created
text files for the user in question.

http://www.microsoft.com/downloads/...familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e



--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[SP]

Thanks for your reply, I'll check it out.

Are the users logged into more than one machine? Usually what happens is
a user has mapped drives to a resource from one machine, on a different
machine he changes his password and then the first machine attempts to
stay mapped to a drive and the password is no longer correct and
eventually locks the user out.

To help try and track down where the account is getting locked out use
eventcomboMT.exe from the Account Lockout tools found out Microsoft's
website. Use the built in search AccountLockouts and search in the
created text files for the user in question.

http://www.microsoft.com/downloads/...familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e



--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Guest]

Yes I had the same problem and used dumpel.exe to find out the account which
was getting locked from another PC.
--
Muhammad Tariq Ahmed Khan
Systems & Security Administrator
MCSE,MCSA,MCSE Security,CCNA,CISSP
Arab National Bank,
Riyadh,Saudi Arabia
Phone: 00966 1 4029000 Ext 8296
Mobile: 00966 5 08880684