Frequent Account Lockouts

[DJ]

Howdy.

We have a mixed bag on our stuff here (mostly 98 clients,
with some 2k Pro SP4 thrown in). We have four Win2k Server
SP4 servers, 3 of which participate in AD, with the other
being a Terminal Server. About 3 weeks ago I set the
Account Lockout Policy for the domain to the standard 3
attempts, etc; About 2 weeks ago I did a walk-around and
updated the Win98 machines with a new DWORD in
HKLM\Network\Logon called "MustBeValidated", with a
default value of 1. For about a week now many people have
been getting locked out of their accounts. The strange
part is that someone might not even be trying to login,
and their accounts get locked. Very strange.

We do also have a Netware 4.2 server in house that is
functioning as a data server...wondering if the Service
for Netware could be causing this problem. I don't believe
it's the Novell server, but I just wanted to mention it.

Also, nobody on a Win2k box is having a problem.

Thanks for any info.

 

[Matthew Harris [MVP]]

If you audit logon attempts (successes and failures) can
you see that people are indeed failing to authenticate and
thus getting their accounts locked?

-M