Problem with Account Lockout Policy (possibly related with KB 305822)

D

Dmitriy

My system have symptoms and conditions which coincide with
described in Microsoft Knowledge Base Article 305822
"Failure Events Are Logged When the Welcome Screen Is
Enabled"
http://support.microsoft.com/default.aspx?scid=kb;en-
us;305822

Event Viewer shows:
EventID 680 error code 0xC000006A, then immediately
EventID 529,
for my current working adm. account, both events repeated
with period 5 min.
But: in event 529 field "Logon Type" is 4, instead 2 as
indicated in example.
Also KB Article 305822 says "This problem was first
corrected in Windows XP Service Pack 1."
But on my system SP1 is already installed as well as all
other necessary patches.

PROBLEM:

When I enable "Local Sequrity Settings > Local Security
Policy >
Account Lockout Policy > Account Lockout
Threshold"
and set "Logon attempts" to 10, then my current account
locked out
and in Event Viewer shows:
EventID 680, error code 0xC000006A,
then immediately EventID 539 (account locked)
for my current working account, both events repeated with
period 5 min.

When I did logoff next I can't logon with current account.
Then I logon with default Administrator account, enable my
account
and disable "Account Lockout Threshold".

I need properly working Account Lockout Policy.

How to solve this problem?
 
D

Dmitriy

I found solution by myself.

The cause actually is in Windows Automatic Update.
This feature install shedule task which run every day with
my current account (which is second administartor account)
and repeat try to run each 5 minutes in case of fault.

It can't logon and run because I changed password lately.
Pasword stored in task and not changed automatically.

I typed a new password in Automatic Update task properties
and now it run correctly and there is no more events 529
(Instead there is pair of events: 680 without error and
then 528 - logon success).

Then I enable "Account Lockout Threshold", work some time,
then logoff and logon successfully.

With enabled Account Lockout Policy, If you create
sheduled task with auto repeating in case of fault, and
type in it's properties a name of user account and
incorrect password, then this account may be locked out
automatically.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top