Windows Xp machine locking account out

[Matt]

Hi,
I have a windows XP machine that is in my network.. it is not on the
domain, and we do not want it on the domain... however we need to access
domain resources with it.

Every time the user goes to access printers on the domain controller, or
file shares his account seems to get locked out. We have checked to
make sure he is using the right password and he claims that he is.

~ Matt

 

[Cary Shultz [A.D. MVP]]

'claims' might be the correct term.

If he is not a member of the domain then what account is getting locked out?
His local user account on that particular system ( not sure how... ) or a
domain user account object? I would be able to believe this more.

And, is he logging on locally to the WINXP Pro system locally with a user
account that is the same as his domain user account object?

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com

 

[Matt]

Well I've reset his password and then watched him lock it out.. I've
also been able to duplicate it knowing what the password is.

He has an account on the domain, his XP laptop just is not a member of
the domain. He is locking out a domain user account object. He logs
on locally to the WINXP pro system with a local user account that is
different then his domain user account object. He then does:

//fileservermachine/share

and XP says
"WOAH BUCKO! I can't access that, the requested account is locked out!"

(Or something along those lines)

Even though he never had a chance to type in his password... go and look
in AD and low and behold it's locked out. I unlock it.. give it a few
minutes to sync.... and have him try again... sometimes it will bring up
a login dialog box (often the first time he tries to log in for the day)
and he'll enter his domain username DOMAIN\username and password (I've
tried also) and it seems to fail and lock him out about 3 our of 5 times
(in that I have to unlock the account.. we'll try again... unlock
account.. try again.. unlock account.. ok it finally went through..

I've watched him type the password.. I've tried typing the password....

 

[ALEX]

I lean to believe that the share blocked the anonymous user from getting it.