Thanks all for the help with this.
Turned out he was logging on to his laptop locally, with the same
username as his domain account, but with a different password.
All sorted now.
--
AdamT
'Thank-you for not requesting read receipts'
List info : http://www.activedir.org/List.aspx
List FAQ:
I would rather look at Event 644 and first make sure that account lockouts are happening from same machine, you are suspecting.Then I will take a look info from this page.
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx#ENAA--KamleshOn 2/28/06, Ada
] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Tuesday, February 28, 2006 11:25 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Phantom Account Locks
Which is why many Var/Vaps run with a 172.x.x.x network because SBSers
tend to be 10.0.0.x or
Which is why many Var/Vaps run with a 172.x.x.x network because SBSers
tend to be 10.0.0.x or 192.168.16.x
But you can't RWW into the server and go from there?
AdamT wrote:
On 2/28/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
<[EMAIL PROTECTED]> wrote:
SBS has a pretty lenient group
cc
ail.activedir.org
Subject
[ActiveDir] Phantom Account Locks
02/28/2006 09:52
On 2/28/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
<[EMAIL PROTECTED]> wrote:
> SBS has a pretty lenient group policy lockout set up by the SBS box
> group policy ...you have to hit 50 invalid logon attempt for an account
> to lockout.
>
This one's set to 5 invalid logon attempts, which mea
Windows Security Log Encyclopedia by Randy Franklin Smith:
http://www.ultimatewindowssecurity.com/encyclopedia.html
Logon Type Codes Revealed:
http://www.windowsecurity.com/articles/Logon-Types.html
SBS has a pretty lenient group policy lockout set up by the SBS box
group policy ...you have to
ail.activedir.org
Subject
[ActiveDir] Phantom Account Locks
02/28/2006 09:52
On 2/28/06, Susan Bradley <[EMAIL PROTECTED]> wrote:
> What's the security log say up on the server?
>
The security log has several of these:
Event ID 529
Source: Security
Category: Logon/Logoff
Type: Failure
User: NT AUTHORITY\SYSTEM
Computer: SBS-DC
Reason: Unknown user name or bad password
Use
help track down the cause.
Regards,
William
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of AdamT
Sent: 28 February 2006 15:52
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Phantom Account Locks
Dear all,
I have one site, with one user whose
What's the security log say up on the server?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of AdamT
Sent: Tuesday, February 28, 2006 7:52 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Phantom Account Locks
Dear all,
I have one site, wit
Dear all,
I have one site, with one user whose account is getting locked out
daily on their SBS box.
My first thought was that this guy is a bit of a muppet, and can't
retain information like passwords for longer than a couple of hours.
When this turned out not to be the case, I figured he must ha
12 matches
Mail list logo
