Solved

Disabling 1 User in AD Disables other users

Posted on 2006-11-30
2
191 Views
Last Modified: 2010-04-18
I've never seen this before.  An employee left a company so we disabled his account.  The next day or so I get a call saying a different user else can't log in.  After some checking I find out that if I eneable the ex-employees account the current employee can log in with her account.  Once the old account is disabled, the current account is also disabled.  I've tried changing passwords on both accounts, but the problem persisists.  All servers are running Windows 2003 Standard, the domain is in native mode.  Any ideas?
0
Comment
2 Comments
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18051312
Recreate the user's account - it seems this guy may have somehow tied his account to hers (SID spoofing?)  I wouldn't risk it.

Disable the ex-employees account, create a new one for the other user, log in to create the new profile then copy all the data (and Desktop contents) to the new profile.  DO NOT copy the entire profile contents - just the user's data.

Once that's working, delete the two suspect accounts.

0
 
LVL 1

Author Comment

by:Leverage IT Consulting
ID: 18070935
I don't think the user who left knew enough to tie the accounts together on purpose.  I've gone ahead and deleted and recreated the account, it works fine now.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question