Accounts locked out

[Dayle Krall]

Hello. Since my upgrade from NT 4.0 to Windows 2000 users accounts are
randomly being locked out. It starts by not allowing the user access to
their mapped drives. When they do a reboot to try and reconnect their
mapped drives their network password no longer works. On the domain
controller under Active Users and Computers I can unlock the users account
and it will begin working again.

I have installed SP 4.0.

In the Event Viewer on the domain controller there are multiple 'Failure
Audit's'. One of the users names keeps coming up and shows that their
username/password was wrong and that they were trying to log into various
computers. This user hasn't been to other computers and trying to log in
and hasn't left another pc signed in as their username. This user has XP
Pro. Other users that are being locked out randomly are on Win 98SE.

I have scanned for viruses and everything has come up clean. There are no
logon scripts enable that are using an old password and as far as I know, no
passwords have been changed.

Any ideas/assistance with this would be greatly appreciated. Thanks.

Cheers
Dayle

 

[newsreader]

Perhaps this user has not been to the other machines but perhaps someone
else who knows this user's Id has. I would not like to cast apsersions
on any particular group of people but I have found in the past that
sometimes someone from the people who work after hours when the regular
workers have gone home has a play...


(e-mail address removed))
URL http://www.canalbs.co.uk/

Troubleshooting and support - contact through the web page please

 

[Marina Roos]

Do you have WINS installed on your W2000-server (as W9x need it)? How many
nics in the server and how are they setup?

Marina

 

[Limeaid]

Have you looked at the computers that the fails are coming from the
individuals are not at?
How about any services on the systems that are possibly running under the
persons username/passwd. Service tries to start - fails --lockouts.

 

[Dayle]

On the user with XP Pro I checked to make sure that they password they used
to sign in every day is the same as their network password. It wasn't (they
had changed it) so I had them change it back to their network password. For
that user there are no longer any 'Failure Audit's ' in the event viewer.
What it seemed to be doing it trying to use the password they had to sign
into their machine as the network password when connecting to network
neighborhood pc's.

This still doesn't explain why the Win 98 SE users get locked out.

We don't have any services running in the backround. The only program that
runs in the background is the virus protection software. The only other
thing these users have in common is that they are mapped to 2 or 3 network
drives. The programs that they use here are mainly emulators and they
connect to the servers via IP addresses.

Cheers
Dayle