Users get locked out every hour

[testing]

I have encountered a customer environment where somehow
they have applied a GPO that results in user accounts
getting locked out every hour.

The admins unlock the account, then it happens again.

Any guesses where to look for a setting ( or clash of
settings in multiple GPO's ) that would result in this
symptom?

 

[Richard Moreno]

Hi-

Perhaps starting out with the GPRESULT tool form the W2K Resource Kit can
guide you in the right direction. Otherwise analyzing the GPO implementation
at every level manually is your other option. (LSDO = Local, Site, Domain,
OU)

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Guest]

Did that, thanks... I've nailed it down to an OU-linked
policy applied to the workstations. Moved the macnine
account to a "clean" OU and the problem goes away...

Now the problem is finding the offending line... Ever
heard of a setting that would cause such a symptom?

 

[Richard Moreno]

If you enable auditing for the security log of a test workstation and then
place it in the problematic OU, does it give you anything to go on when an
account gets locked? What about the GPO at the OU level; does it have any
local policies, account policies that it's trying to fight with from the
domain level? Have never come across a setting to cause this at an OU level
only...

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.