You sure nothing is showing in the SERVER logs? (You are logging failed logon attempts correct?)
Sounds like your w2k pro box is failing to autheticate in the nt4 domain and you have a lockout policy set. Just to test this...have the user log onto the domain with an NT4 workstation and see if he is still being locked out. -Peter Lists wrote: > Network info: > > NT 4 server network with W2KPro clients. > > > Situation: > > We have a user that keeps getting their NT account locked out for reasons that we >are not yet aware. Unable to get much info from Event Viewer on NT4 servers or >W2KPro client. Don't know if this is being done by someone intentionally (somewhere >on the network or from the client's computer) just to give us a hard time, or a rouge >program somewhere on the network or client's computer trying to logon as that > user. At this time, we are not ruling anyone out, everyone is suspect. We have >replaced the client's computer (not totally, user copied shortcuts and some files >back to the new desktop...I know, if it was up to me they would not have been allowed >to do this, but it's not up to me) and the account is still getting locked out. We >are in the process of creating a new NT account for this user and see if it still >occurs. > > > Bottom Line: > > We need to find out what is causing this account to get locked out and prevent it >from happening again. > > > Some thoughts: > > Is there third party software that will be able to determine what is causing this >account to get locked out? Some sort of sniffing program on the server or the client >to find out what program is trying to logon with this account and from where? > > If this is a user doing this intentionally, what are they doing and from where? Are >they trying to connect remotely to the client's registry, or to a share on the > client computer? > > Is there third party software that can help? > > Any suggestions/recommendations welcome. > > > > Thanks, > Jack > > > -- ======================================== Peter Thoenen - Systems Administrator UW-Milwaukee - Career Dev Center vox:414.229.4486 - fax:414.229.5347 email:[EMAIL PROTECTED] || [EMAIL PROTECTED] ========================================
