Account keeps locking itself
Hi we are having starange prob
today 1 user try to change the password and account locked itself then i had changed the password and untick the "account locked" option from the active directory (user account properties)
and try to log on but still it shows "unable to log on because account has been locked out..."
there are 3 DC replicating the A.D (1 of them woith exchange server), i thought it could be one of the AD keeps changing the account to locked status, i have just installed the "Account Lockout and Management Tools"
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
From account lockout & managment tool i have unlocked the user from all the server and if refresh out of 4 server only 1 shows unlock but rest of the server shows locked.
i am not sure what causing this problem.....any idea?
Any idea??? on this
today 1 user try to change the password and account locked itself then i had changed the password and untick the "account locked" option from the active directory (user account properties)
and try to log on but still it shows "unable to log on because account has been locked out..."
there are 3 DC replicating the A.D (1 of them woith exchange server), i thought it could be one of the AD keeps changing the account to locked status, i have just installed the "Account Lockout and Management Tools"
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
From account lockout & managment tool i have unlocked the user from all the server and if refresh out of 4 server only 1 shows unlock but rest of the server shows locked.
i am not sure what causing this problem.....any idea?
Any idea??? on this
Last Comment
Please connec to all the 3 DC's and make sure the account is unlocked on all the DC's....what is your replication duration between DC's ? Do you have all the DC's in same site and or in different site.
ASKER
yeah i did even manually by logging into each DC as soon as i untick the "account lock" option and apply/ok then if i refresh it goes back to locked status, 1 DC located on diff site that doesn't show locked only those located at same site
Where to check the replication duration..thanks
Where to check the replication duration..thanks
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Thanks Veera
in absense of actual IT admin i have not changed any settings, where can i see the replication settings
only 1 server in remote location and its connected via WAN (VPN)
in absense of actual IT admin i have not changed any settings, where can i see the replication settings
only 1 server in remote location and its connected via WAN (VPN)
you should go to the AD sites and services ,run dssite.msc from run prompt.
Click the site,drop down to server and click the server and right click the server from NTDS settings and check in view schedule tab
Click the site,drop down to server and click the server and right click the server from NTDS settings and check in view schedule tab
Have a look at the below link which explains everything you need:
www.tech-faq.com/configuring-and-troubleshooting-active-directory-replication.shtml
>>>> Veera.
www.tech-faq.com/configuring-and-troubleshooting-active-directory-replication.shtml
>>>> Veera.
ASKER
replication is once per hr
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
i hv shutdown the PC
and did manual relication
as soon as disable the "Account Lock" and apply/ok then refresh the AD then check back the account properties its already change to account lock.
and did manual relication
as soon as disable the "Account Lock" and apply/ok then refresh the AD then check back the account properties its already change to account lock.
ASKER
no luck.
Did you follow the KB 824209 which I mentioned earlier?
Check for Event Log 644 in your DCs under Application log.
>>>> Veera.
Check for Event Log 644 in your DCs under Application log.
>>>> Veera.
In which domain controller you are checking ?did you check on the DC in remoet site.
On the AD users and computers, right click and connect to all the 3 DC's and see....If you did the maunal replication it has to be same on the all the DC's
On the AD users and computers, right click and connect to all the 3 DC's and see....If you did the maunal replication it has to be same on the all the DC's
ASKER
still no joy
Check for the event log 539 in security log from DCs.
It should show you from which computer his account is getting locked.
Drill down on that computer to fix this issue.
>>>> Veera.
It should show you from which computer his account is getting locked.
Drill down on that computer to fix this issue.
>>>> Veera.
ASKER
still didn't get chance to look on it may be today
now this is bit worse....slowly people are having same issue.
any further suggestion on this will b apreciated
now this is bit worse....slowly people are having same issue.
any further suggestion on this will b apreciated
The below links should give you the right idea and approach:
http://support.microsoft.com/kb/824209
www.tech-faq.com/configuring-and-troubleshooting-active-directory-replication.shtml
>>>> Veera.
http://support.microsoft.com/kb/824209
www.tech-faq.com/configuring-and-troubleshooting-active-directory-replication.shtml
>>>> Veera.
Hi,
I am just following up if this issue is resolved or you need any further assistance on this.
I am just following up if this issue is resolved or you need any further assistance on this.
Exchange
Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.
213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
