XP Machine Account Auto Locking

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

OK, this is something strange I have never seen before. I
have an XP Professional machine that is on an NT network
and to a certain extent everything is working fine, but
all of a sudden, sometimes when accessing a specific drive
or on its own when the user is away the persons account
becomes locked.
I have checked a number of things and this is not due to
other people trying to access her account or her entering
in the password wrong 3 times.

We have an intranet which uses the windows
account/password and after using the intranet, when she
comes to open it again it locks her out and locks the
mapped drives because the accout is locked, even though
she is already logged into the machine and has not done
anything out of the ordinary.

I have applied all XP updates, critical and non critical
and service pack 1a.

I have nothing on the PBC event logs or anywhere giving me
any clues as to when or why it is happening.

The closest I have got is somebody in passing saying that
there was an issue with XP accessing a 2000 server, which
this machine does (all other machines are 2000! - figures!)
But I was also told the critical updates should fix this?

If you can understand what i'm trying to say (sorry for
being so long winded) has anybody come across this and why
is it happening and how do I fix it? I'm totally stumped!

All help and responses much appreciated.

Mark.
(Supposed to be Tech Support!) :O
 
Inlined . . .

--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
Mark said:
OK, this is something strange I have never seen before. I
have an XP Professional machine that is on an NT network

I take that to mean NT 4
and to a certain extent everything is working fine, but
all of a sudden, sometimes when accessing a specific drive
or on its own when the user is away the persons account

what certain drive ? remote ? where ?
what means "or on its own"
is ths all within a domain using a domain account ?
becomes locked.
I have checked a number of things and this is not due to
other people trying to access her account or her entering
in the password wrong 3 times.

We have an intranet which uses the windows
account/password and after using the intranet, when she

OK so that seems to clarify that you do have a domain
comes to open it again it locks her out and locks the
mapped drives because the accout is locked, even though
she is already logged into the machine and has not done
anything out of the ordinary.

OK, so is this a fair restatement.
Person can log into the XP using a domain user account
and then after a time finds that it is not possible to access
shares on other machines, shares to which the account should
have access. When this happens there is some kind of feedback
provided that the account is locked.
?
I have applied all XP updates, critical and non critical
and service pack 1a.

I have nothing on the PBC event logs or anywhere giving me
any clues as to when or why it is happening.

PBC ?? PDC of an NT 4 domain ?
You need to look into the event logs of all domain controllers.
The closest I have got is somebody in passing saying that
there was an issue with XP accessing a 2000 server, which
this machine does (all other machines are 2000! - figures!)
But I was also told the critical updates should fix this?
There are a couple things that could be involved.
The first I would check is to see whether the XP is still
configured to only use LM and NTLM. If so, change it so
that is will try to use NTLM v2. This is in the machine's
local security policy (assuming your domain is NT4) within
the security options
If some of the sharing machines allow NTLM but others
require NTLMv2 and the XP is set as most seem to default
in an NT domain then this could be what is operative in
what you are describing.
 
Back
Top