Network log on issues

[zmoustache]

Hi...
Hoping you can help with this problem

User gets pop up saying windows passwords will expire in 14 day (something
like that)
We have nothing set up like this for the passwords...just to reset once a
year.

User will reset password and then after logging on again can not log in with
that password. User is also locked out after 1 attempt?

However, if user changes password to same one as before, then there is no
problem

At first it was just 1 user...now it seems to be affecting all users.

If the user changes password and gets messed up, then it's a pain to get
them back to the way they were before...I delete various workgroups from the
profile and then add them again and this seems to take care of it.

I have scanned the server for rootkits and viruses, nothing was found.

I am confused as to why this may be happening...

Any suggestions would be appreciated.

Thanks

Wes

 

[Salvador Manaois III]

Check the GPOs applied to your users. Specifically, verify if you have
password aging and password history configured.

You mentioned it started with one user and this issue has somewhat spread to
others. Sounds like a malware spreading to me. Check for any "unusual"
auto-starting entries (via msconfig or Syinternals' autoruns) and
delete/disable those you find.