• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 223
  • Last Modified:

User Account lockout 3 times day

We currently have a user whose account locks out about three times a day for no reseon.
I used the tool lockoutstatus.exe and can see the account locking out and which domain it is locking out from (we have 3 domains)

When i look at the event logs you can see there was an error which is

Replication warning: The directory is busy. It couldn't update object CN="Hitchen, Paul",OU=Development,OU=IT,OU=Haywards_Heath_Users,OU=Users,OU=EA,DC=int,DC=europ-assistance,DC=co,DC=uk with changes made by directory 7028d468-345e-45a5-9b39-df3e7c01f49b._msdcs.int.europ-assistance.co.uk. Will try again later.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

That has now fixed itself but now I dont know why the problem is happening and how to resolve this issue.

0
Stevenpj
Asked:
Stevenpj
  • 6
  • 4
  • 2
3 Solutions
 
lundholmsterCommented:
Did the user change the password lately? Could an old password be stored somewhere in IE for an intranet site?
0
 
denisbrownCommented:
There is a command you can run from the Run box.  Control keymgr.dll that will list cached passwords.  Just delete anything that shouldn't be in there.  This usually fixes most of our lockouts.
0
 
StevenpjAuthor Commented:
hi

do yo mean type keymgr.dll in and hold ctrl and press return
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
StevenpjAuthor Commented:
we have to change the users password 3 times a day on Active Directory. There was this File Replication Problem but it looked like it fixed itslef.
I guess the user account is not replicating the username and password across to all domains so it locks out.
I thought it might be the account is being used as a serivce but I have no idea where to find out where it would be doing this from
0
 
lundholmsterCommented:
I would just recreate the account. That seems quicker.
0
 
denisbrownCommented:
Steven - no actually click start run, and in the run box type Control keymgr.dll then enter

0
 
StevenpjAuthor Commented:
I tried this and it brings up stored usernames ad passwords box with nothing in it.

Am i suppose to do anything such as adding the username and password in?
0
 
denisbrownCommented:
Hi Stevepj

No it just tells you if they have a stored password that can overwrite the login.  As previous suggestion, I would recreate the accounts.  Is this a specific user(s) or domain wide?
0
 
StevenpjAuthor Commented:
ok thanks for this
0
 
StevenpjAuthor Commented:
I have fixed it. It was down to Terminal Servers sessions not being disconnected properly. Thanks for all your help
0
 
denisbrownCommented:
Thanks for letting us know Stevenpj.
0
 
StevenpjAuthor Commented:
No problem. I wanted to give you the points but give me the accepted solution. But it would not let me sdo this.. Sorry about that
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

  • 6
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now