Account keeps locking problem 1

[tom11011]

Hi group, looking for some advice.

I have a user who comes to me every couple of days first thing in the morning complaining his account is locked. I check AD and sure enough, it's locked and needs unlocking. Other than someone truly attempting to logon as him, can you think of what could be causing this? Here is what I know and what I have checked.

-He shuts his computer down at night and boots it up in the morning.
-He has no scheduled tasks running
-I suspect it is caused by his computer booting up because passwords are set to automatically unlock after 10 minutes of being locked.
-Domain is set to 5 unsuccessful tries before being locked.

Can I account for all his logins somehow? Or, any other advice appreciated.

 

[GrnEyedLdy]

Tom11011,

How about enabling auditing for Account Logon Events...(both success and failure) for the PC this individual logs onto each morning.

Just a thought...

Patty

 

[abrannon]

I have seen this alot. In most of these cases the user has resently changed his or her password and is still logged on to a computer, with the old password. Or the person has a share that is logged in with an old password. My last situation is in a AD Domain running in mixed mode, if someone reset the password on an old NT BDC it may not have replicated to the W2K DC's. This has happened on one occation at our site.

 

[BFOJ]

Check the Event Viewer, Security Log.

 

[jc64]

Read the KB articles below.
Actively pursue an SP3 upgrade schedule.
Activate AD domain account success/failure logging.
Consider increasing the number of bad attempts before lockout. (especially after reading the KBs below)
Create a troubleshooting tree to aid help desk. (check logs, check for other login locations, test again)

Light Reading:

http://support.microsoft.com/default.aspx?scid=kb;en-us;278299

http://support.microsoft.com/default.aspx?scid=kb;en-us;264678

http://support.microsoft.com/default.aspx?scid=kb;en-us;287639

http://support.microsoft.com/default.aspx?scid=kb;en-us;276541