Hi Adam,

Not sure if anyone has mentioned it or not,  You'll see this often if
someone has an RDP session open somewhere and changed his password
elsewhere.  Or if he was logged into another computer in another way when
he changed it.  Lots of times users "disconnect" instead of logging out.

HTH,
John



                                                                           
             AdamT                                                         
             <[EMAIL PROTECTED]                                             
             >                                                          To 
             Sent by:                  ActiveDir@mail.activedir.org        
             [EMAIL PROTECTED]                                          cc 
             ail.activedir.org                                             
                                                                   Subject 
                                       [ActiveDir] Phantom Account Locks   
             02/28/2006 09:52                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             [EMAIL PROTECTED]                                             
                tivedir.org                                                
                                                                           
                                                                           




Dear all,

I have one site, with one user whose account is getting locked out
daily on their SBS box.
My first thought was that this guy is a bit of a muppet, and can't
retain information like passwords for longer than a couple of hours.
When this turned out not to be the case, I figured he must have
something running on his computer, which is attempting to authenticate
using his ID and an old password.
I thought maybe it was a mapped drive, done with a net use command and
a username/password argument.  After that didn't pan out, I thought it
might be something running as a chron job or scheduled task, but that
hasn't worked out either.

Any pointers on what could be doing this?

Cheers,

--
AdamT
'Thank-you for not requesting read receipts'
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to