sbs 2003 one user account keeps getting locked out instantly

Posted on 2009-05-20
Medium Priority
Last Modified: 2012-08-14
i have a sbs2003 domain.  one of my users just started getting locked out of her account instantly.  if you go into active directory, and unlock her account, then go back in, the same thing happens.  i have checked over her machine and there are no viruses?

i even turned that machine off and it is still happening.

Account Lockout (Event ID: 539) comes up like 20 times the same second every few minutes?

any ideas?
Question by:americanmobile
LVL 23

Expert Comment

ID: 24438092
Wonder if any services are set with that users details..

Best to work out if it is on that machine or not, have you the security event logs for the failed logins?

LVL 18

Accepted Solution

Americom earned 1500 total points
ID: 24441014
Did the user recently changed the password? If the user is using a domain account, see if your domain controller has event id 644.This event should show you where there account was locked from which machine. May be the user have logged on to another machine or server with old password,  or have task or mapping using the old credential. Also, see if this help: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24367191.html?cid=236

Author Comment

ID: 24442200
it was a vista home machine that was on the network and had a shared drive to the server the user had put in her username/password for that person.

thanks to all

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

The Windows Firewall provides an important layer of protection and a rich interface to configure it. Unfortunately, it lacks item level filtering. This article details my process of implementing firewall-as-code to reduce GPO bloat.
An Incident response plan is an organized approach to addressing and managing an incident. The goal is to handle the situation in a way that limits damage and reduces recovery time and costs.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question