Solved

Win 2000 Dial up account lockouts out intermittently

Posted on 2004-10-29
152 Views
Last Modified: 2010-04-14
Windows 2000  Domain account  will lock out at various times during the day, everyday.   It is a Dial up account with domain user access.  account settings are correct.  She is not logged on to any other machine, and she is the only user at this site.  we have run virus scanner with nothing found. we cannot find anything in the event viewer other than she logged on successfuly. She has no mapped drives. user states that the computer will boot her out and then the account will lock her out.  she is the only one at this site and she has not given her un or pw to anyone.  she does not have a pc at home that she tries to dail in with.  When the user leaves at the end of the day she disconnects from the domain and the next morning her account is locked out.
0
Question by:Securitas
    4 Comments
     
    LVL 20

    Expert Comment

    by:Debsyl99
    Hi
    Have you enabled failure auditing of logon events at the server? Just in case there is some service trying to run under her credentials with an outdated password...

    Deb :))
    0
     
    LVL 1

    Author Comment

    by:Securitas
    We feel confident the problem has been resolved now. The user in question was a remote user who was connecting through a dial-up account, then using VPN client software to make a tunnel to our OC. When the pc in question was setup it was joined to our domain, the user had been logging into the pc using the cached domain account. At this point the problem came to be when either:

    A- The users p/w had expired and was changed.

    or

    B- The user forgets p/w and has helpdesk reset it for them.

    What we beleive was happening is that once they log on with the cached account, then make there connection and tunnel, that cached account is trying to authenticate to something on the domain, that p/w is different then there current p/w and locking out the account. Fortunately the user new there original password and we changed there account to that. The users account has not locked out in several days.

    As a side note we did have failure auditing of logon events turned on but for some reason could find any for the account in question. Thank you Debsyl99.

    I will work with the rest of our team to figure out a better solution for our remote users so this can be avoided in the future. Maybe we will have them just logon with a local account.

    I was not the original tech to work on the issue so I have stated all the facts to the best of my knowledge and hope this can help someone out in the future.


    Thanks,
    Ron Z
    0
     
    LVL 20

    Expert Comment

    by:Debsyl99
    That's great - Suggest you post a question in Community Support, including a link to this one and request PAQ and refund,
    All the best,
    Deb :))
    0
     

    Accepted Solution

    by:
    Closed, 500 points refunded.

    modulo
    Community Support Moderator
    Experts Exchange
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Easy CSR creation in Exchange 2007,2010 and 2013
    This video Micro Tutorial is the first in a two-part series that shows how to create and use custom scanning profiles in Nuance's PaperPort 14.5 (http://www.experts-exchange.com/articles/17490/). But the ability to create custom scanning profiles al…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

    913 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now