RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Or they had a terminal server session and closed it without logging out... -Original Message-From: Hutchins, Mike [mailto:[EMAIL PROTECTED]]Sent: Wednesday, January 15, 2003 9:06 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] User's Account Locked out Every morning and locked the workstation instead of logging out.. -Original Message-From: John F. Hann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 8:05 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] User's Account Locked out Every morning Logged in another PC under an old password -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 9:01 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message and locked the workstation instead of logging out.. -Original Message-From: John F. Hann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 8:05 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] User's Account Locked out Every morning Logged in another PC under an old password -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 9:01 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
Also could be custom service developed by someone and they used their userid/password for the credentials for the service. I am asked periodically to investigate the cause of this and I search the domain controllers security logs for 539 and 644 events. Part of the message field in the events is the workstation name involved. You'll likely find more than one machine involved. One of them will be the machine with the out of data password being used for the manual drive map or login with old password, etc... They're fairly easy to resolve as long as you're logging, even with 100+ domain controllers. Bjelke John A Contr AFRL/VSIO <[EMAIL PROTECTED]> @mail.activedir.org on 01/15/2003 09:07:43 AM Please respond to [EMAIL PROTECTED] Sent by:[EMAIL PROTECTED] To:"'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> cc: Subject:RE: [ActiveDir] User's Account Locked out Every morning Manual drive mappings with old passwords.. -Original Message- From: John F. Hann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 8:05 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] User's Account Locked out Every morning Logged in another PC under an old password -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin Felker Sent: Wednesday, January 15, 2003 9:01 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user's accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin *** PLEASE NOTE *** This E-Mail/telefax message and any documents accompanying this transmission may contain privileged and/or confidential information and is intended solely for the addressee(s) named above. If you are not the intended addressee/recipient, you are hereby notified that any use of, disclosure, copying, distribution, or reliance on the contents of this E-Mail/telefax information is strictly prohibited and may result in legal action against you. Please reply to the sender advising of the error in transmission and immediately delete/destroy the message and any accompanying documents. Thank you. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] User's Account Locked out Every morning
Also AT jobs with old credentials -Original Message- From: Bjelke John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 7:08 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] User's Account Locked out Every morning Manual drive mappings with old passwords.. -Original Message- From: John F. Hann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 8:05 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] User's Account Locked out Every morning Logged in another PC under an old password -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin Felker Sent: Wednesday, January 15, 2003 9:01 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user's accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Have they recently changed their password? Is it possible that their profile has some kind of rememberd connection which is caching the old password and trying to use it at logon to connect to a resource. That will fail and lock out the account - I've seen this happen a couple of times but can't pin down exactly what causes it. Steve -Original Message-From: Kevin Felker [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 15:01To: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Manual drive mappings with old passwords.. -Original Message-From: John F. Hann [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 8:05 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] User's Account Locked out Every morning Logged in another PC under an old password -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 9:01 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user's accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
The user is logged into multiple machines at the same time, and has changed their password since they last logged in somewhere else. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Kevin Felker [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, January 15, 2003 10:01 AM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] User's Account Locked out Every morning > > > Every morning I have to unlock one of > my user's accounts because it is locked out every morning. > > Does anyone know what could be causing this? > > Thanks > > Kevin > List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] User's Account Locked out Every morning
There could a number of reasons for this. A good way to find out additional information is to use the Account Lockout Status utility from Microsoft. I believe this is only currently available directly from Microsoft PSS, but will be available in future resource kits. Basically, the way it works is you give it a username and it polls each DC in the domain for information, including "User State", "Bad Pwd Count", "Last Bad Pwd", "Lockout Time", "Orig Lock", etc. Tony -- Original Message -- From: "Kevin Felker" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 15 Jan 2003 09:00:52 -0600 Every morning I have to unlock one of my user's accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Is this a windows 98 machine? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 7:01 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
Kevin, Is the user working via Pass Through Authentication? I had a temporary user whose laptop was a member of another domain (non-trusted) using resources in a domain via Pass Through Auth like accessing his Exchange Mailbox through Outlook and File Shares. The domain his laptop was not a member of would lock his account with no errors in any of the event logs, no reported failed auth attempts. Unfortunately, the only resolution I found was to change the domain membership of his laptop, problem solved. Kindly, Phillip -Original Message- From: Kevin Felker To: [EMAIL PROTECTED] Sent: 1/15/2003 10:00 AM Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user's accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Check your security logs and find out. --Kevinm M, WLKMMAS, Exchange MVP, And Beyond From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 7:01 AMTo: [EMAIL PROTECTED] Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
RE: [ActiveDir] User's Account Locked out Every morning
Title: Message Logged in another PC under an old password -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin FelkerSent: Wednesday, January 15, 2003 9:01 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] User's Account Locked out Every morning Every morning I have to unlock one of my user’s accounts because it is locked out every morning. Does anyone know what could be causing this? Thanks Kevin
