user accounts being periodically locked out

[kevin]

i have a very strange issue going on....every so often, my
domain accounts get locked out. I have 3 domain
controllers, one AD domain, and 2 locations. 30 users
total. One DC is in Houston, and the other 2 are in SF.
For the last few days, the accounts for the people located
in Houston have all been locked out. It sometimes happens
to all the accounts (even the SF accounts), but usually
just the Houston people. I reset all of them, and
sometimes in a few hours, or sometimes 12 hours later,
they'll get locked out again. I have no domain security
policies running (accounts are set to not lock out), and
no group policies. However, these accounts all seem to
get locked out. i have exchange 2000 running on the DCs,
but that shouldn't affect it. there is symantec antivirus
8.x running on the DCs, but that should not lock these
accounts. i am not running any services on the DC that
uses any domain accounts. they all use the local system
account. i even stopped the scheduled daily virus scan
for the servers, but this morning i got a call saying they
were locked out again twice this morning! what can be
going on????

thanks for your help...
kevin

 

[Matjaz Ladava [MVP]]

Have you already read
http://www.microsoft.com/technet/tr...ndowsserver2003/maintain/operate/BPACTLCK.asp
for account lockout troubleshooting.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com