Account Lockout Problem

[wombatz]

Hi all,
My company recently upgraded to windows 2000 server and for some reason some PC's in our domain running windows 98 will get locked out for no reason.
The same users every day get locked out
they can be locked out while loged in to the domain
they are not misspelling their passwords
and the chance of a hacker trying to access their account is very low .

Any suggestions?

 

[ashpp]

Is this similar to your problem?

http://support.microsoft.com/default.aspx?scid=KB;en-us;q278558

Are they are event IDs on the server?

Ash.

 

[GiaBetiu]

Strange indeed.
Thinking what can be different, the difference is that those computers will use NTLM for authentication.
Check if everything is OK with this. Check what authentication levels are used by the server:
HKLM\System\CurrentControlSet\Control\LSA\LMCompatibilityLevel
0 =send LM & NTLM responses
1 =Send LM & NTLM–use NTLMv2 session security if negotiated
2 =Send NTLM response only
3 =Send NTLMv2 response only
4 =Send NTLMv2 response only\refuse LM
5 =Send NTLMv2 response only\refuse LM & NTLM

Win9x needs DSClient to use NTLMv2.
So, check this, and, we can see what can be done later.


Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[wombatz]

AshleyPride
Yes this artical is on the right track in the case's of some user sessions locking out
But I don't think it is the fix
this problem effects approximently 16 out of 68 PC's company wide that are running Windows 98

could it be a profile problem , image problem or even a hardware problem ?

 

[LiNetTech]

When you installed win2k server did you pay attention to adding the Pre-Windows 2000 Compatible Access users in the main built in group If not man there is a heck of alot to configure !