• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 219
  • Last Modified:

User Account lockout 3 times day

We currently have a user whose account locks out about three times a day for no reseon.
I used the tool lockoutstatus.exe and can see the account locking out and which domain it is locking out from (we have 3 domains)

When i look at the event logs you can see there was an error which is

Replication warning: The directory is busy. It couldn't update object CN="Hitchen, Paul",OU=Development,OU=IT,OU=Haywards_Heath_Users,OU=Users,OU=EA,DC=int,DC=europ-assistance,DC=co,DC=uk with changes made by directory 7028d468-345e-45a5-9b39-df3e7c01f49b._msdcs.int.europ-assistance.co.uk. Will try again later.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

That has now fixed itself but now I dont know why the problem is happening and how to resolve this issue.

0
Stevenpj
Asked:
Stevenpj
  • 6
  • 4
  • 2
3 Solutions
 
lundholmsterCommented:
Did the user change the password lately? Could an old password be stored somewhere in IE for an intranet site?
0
 
denisbrownCommented:
There is a command you can run from the Run box.  Control keymgr.dll that will list cached passwords.  Just delete anything that shouldn't be in there.  This usually fixes most of our lockouts.
0
 
StevenpjAuthor Commented:
hi

do yo mean type keymgr.dll in and hold ctrl and press return
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
StevenpjAuthor Commented:
we have to change the users password 3 times a day on Active Directory. There was this File Replication Problem but it looked like it fixed itslef.
I guess the user account is not replicating the username and password across to all domains so it locks out.
I thought it might be the account is being used as a serivce but I have no idea where to find out where it would be doing this from
0
 
lundholmsterCommented:
I would just recreate the account. That seems quicker.
0
 
denisbrownCommented:
Steven - no actually click start run, and in the run box type Control keymgr.dll then enter

0
 
StevenpjAuthor Commented:
I tried this and it brings up stored usernames ad passwords box with nothing in it.

Am i suppose to do anything such as adding the username and password in?
0
 
denisbrownCommented:
Hi Stevepj

No it just tells you if they have a stored password that can overwrite the login.  As previous suggestion, I would recreate the accounts.  Is this a specific user(s) or domain wide?
0
 
StevenpjAuthor Commented:
ok thanks for this
0
 
StevenpjAuthor Commented:
I have fixed it. It was down to Terminal Servers sessions not being disconnected properly. Thanks for all your help
0
 
denisbrownCommented:
Thanks for letting us know Stevenpj.
0
 
StevenpjAuthor Commented:
No problem. I wanted to give you the points but give me the accepted solution. But it would not let me sdo this.. Sorry about that
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 6
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now