RE: Win2K Pro client / NT domain Account Lockouts

[Heavner, Charlie]

Great info Robert.

Thanks again, Charlie

Jefferson Pilot Financial

-----Original Message-----
From: Muncy, Robert [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 4:40 PM
To: NT System Admin Issues
Subject: RE: Win2K Pro client / NT domain Account Lockouts

Did the hotfix and the went to SP2.  Much better now.  But still not perfect.

Robert

-----Original Message-----
From: Heavner, Charlie [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 4:33 PM
To: NT System Admin Issues
Subject: RE: Win2K Pro client / NT domain Account Lockouts

we bumped ours up from 3 tries and that seems to have helped. Have you applied the update to msgina.dll or did you just go straight to Win2K Pro SP2? I want to recreate the problem before I apply the patch so that I know the patch really fixed the problem. I can't seem to get a PC to lock more than once. I'm hoping that I can lock one consistently.

Once again, thanks for your input,

Charlie

-----Original Message-----
From: Muncy, Robert [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 1:21 PM
To: NT System Admin Issues
Subject: RE: Win2K Pro client / NT domain Account Lockouts

I have been battling this one for a awhile,we run a very small password lock out time frame (3 tries), which is a killer in W2K because of the Kerbosos issue.  ( every password attempt by a users counts as two, one to the Sam and one via kerbosos!).

In addational I know that it seems to effect users more after they change password and do not log out and log back in.

Good luck

Robert Muncy

Sherman Financial Group

-----Original Message-----
From: Heavner, Charlie [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 12:02 PM
To: NT System Admin Issues
Subject: RE: Win2K Pro client / NT domain Account Lockouts

You Rock, Robert! I've been noodling around this problem for awhile now and I'm testing out a MS Fix of the msgina.dll. If that works, then I'll use it on the fly for my clients that have this prob. Looks like I'm gonna have to rework our image sooner than I wanted to and port in SP2...we're running SP1.

Thanks,

Charlie

-----Original Message-----
From: Muncy, Robert [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 07, 2001 1:55 PM
To: NT System Admin Issues
Subject: RE: Win2K Pro client / NT domain Account Lockouts

I would check out Q263821 and Q275508.

Robert Muncy

Sherman Financial Group

Network Team

 

-----Original Message-----
From: Heavner, Charlie [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 06, 2001 2:31 PM
To: NT System Admin Issues
Subject: Win2K Pro client / NT domain Account Lockouts

I'm deploying Win2K Pro in a Mixed environment (WinNT domain).

Randomly, Win2K Pro clients will experience an Account Lockout.

I think that it is an NTLMv2 replication problem across DCs but don't have a good handle on how to prove it.

Anybody ever experience this and how did you resolve it?

 

I've not changed any of the default security settings in the LGPO on my clients.

We aren't running any Win2K servers yet.

 

Thanks for any help,

Charlie

 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm