Locked Account Problem

[ibrahims]

Hello;
I've a problem with one of my client's account; His Account is Locked out every 2 or 3 minutes ( Unexpectedly ).

please advise

 

[legion2552]

Check to see if he's logged on somewhere else. If a user is logged on in two or more different locations and then changes his/her password on one of the workstations, it causes a credential conflict in the AD, which consequently for security, locks the account.

 

[skydiver3535]

Check for any terminal services active session also -
or vpn connection -
if the user is connected to one of this sessions with an old password then the acct will get lock out

 

[MichealC4]

Not to overreact, but this sounds a lot like the Null Sessions attack.

http://www.securityfocus.com/infocus/1352

I've done a write-up myself about this, but it is a bit much to post here (3 pages) with some useful links, and so on. But this is what caused the lockouts at my place of employment. Just something else to look for.

----------------------------
I am Comptia A+ Certified

 

[Zilantyas]

Also, this may not help if only one user is experiencing this issue but I would also check the Account Policies Lockout Duration settings:
1. Go to START>RUN type gpedit.msc
2. Under Computer Configuration expand Windows Settings
3. Expand Security Settings
4. Expand Account Policies
5. Select Account Lockout Policy
6. Double-click Account Lockout Duration
7. Uncheck "Define this policy setting"
8. Click Apply. Click OK.

Hope this helps!

Zilantyas Technology
Professional Information Technology Solutions

http://www.zilantyas.com

 

[ricpinto]

Maybe there's a program that's keep connecting to a share, using the user credential of outdated password.