Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Sudden account lockout

Status
Not open for further replies.
Jul 28, 2000
40
US
Some of my users experience sudden lockouts. What happens is that they would be merrily computing on their NT workstation but then all of a sudden when they try to access a certain folder or select a network printer, they are told that the accounts are locked. When they call my help desk, sure enough in User Manager for Domain the accounts are locked. What's the cause?
 
Someone else is trying to login using their accounts from another workstation or location . i would make certain that those users are not trying to log in to a computer they are not authorized to use, or that someone else is not trying to use their login/password, and that your users are not "sharing" logins. If none of these are the case, INCREASE SECURITY and FAST. You may actually have an outside source trying to get in. It sounds to me like you have a very serious potential security risk.problem on your hands, and you should take action before it gets out of hand.


Good Luck,
SteelDragon
 
maybe you should try to keep this account locked out, and just create a new account for this user
Also you might want to check if this user account is not used in scripts or applications (hardcoded passwords can lockout a user) Peter Van Eeckhoutte
peter.ve@pandora.be

 
You might also want to consider enabling auditing on your domain controller. This will give you some visibility of failed login attempts. Make sure you select "Failure" for the "Logon/Logoff" event. Results are in the security log in Event Viewer.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top