outlook locking AD account

We have a system with multiple Outlook profiles set up.  Every time anyone opens Outlook and signs in under another profile, it locks out one specific person's AD account.  It is only Outlook and only on this one system.  We have not been able to find any stored passwords and have uninstalled and reinstalled Office completely.  Any thoughts would be appreciated.  
vbevinsAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MuraliCommented:
Let us be more clear...
What Operation you use...
Which version office suite you usee
What protocol you use to connect the outlook to server
Are you using exchange server?
How many profiles been configured in your outlook
Is it all the profiles belongs to same domain?
What antivirus you are using?
kblumenCommented:
Check out this article: http://support.microsoft.com/kb/276541
kblumenCommented:
sorry my previous post doesn't apply
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

vbevinsAuthor Commented:
More info. on our environment -
We are on a Windows 2000 Domain
All accounts are in the same Domain
Only this one system causes the locout, other systems with the multiple profiles configured do not cause the AD account to lock
There are 7 Outlook profiles set up
We are using Office/Outlook 2007 in an Exchange environment
Our Virus software is McAfee - Enterprise 8.0


kblumenCommented:
Is one of the profiles in outlook the person that gets locked out (or at least named similar)?
vbevinsAuthor Commented:
Yes, the AD account that gets locked out is one of the profiles on the system.   We have tried deleting and recreating profiles on that system as well.  
kblumenCommented:
Is the password correct?  Have you checked with the user?  change it perhaps.  Any home PC's logged in perhaps?
FemSteenkampIT managerCommented:
Hi

what is the account type that windows is looged in? is this perhaps the domain account that gets locked when some other person logs into a outlook profile.

if so, create a local account on teh machine to log in to windows ( one that doesnt ahve an outlook profile) and then people logging in to outlook should have a problem.
kblumenCommented:
Might I recommend the AD account lockout tool.  You can see the origin of the lockouts:
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
kblumenCommented:
from: http://technet.microsoft.com/en-us/library/cc776964%28WS.10%29.aspx




Analyzing Event Logs

You cannot determine the authentication type that was used when an account is locked out unless you enable Netlogon logging before the account lockout. However, because of differences in authentication, there may be situations in which Netlogon logging does not capture the data that you need to determine which computers were involved in an account lockout. Configuring the appropriate computers to create event logs may provide additional information in these situations.

Before the problems occur, you should enable security auditing and Kerberos logging on all computers that might be involved in the account lockout event. Enabling auditing and Netlogon log files is discussed elsewhere in this document. If the auditing is not configured before the initial error occurs, it can be done afterwards.

Once the account lockout occurs, there are several tasks that should be completed to help identify the cause of the issue:

   1. Obtain both the Security and System event logs from all of the computers that are locked out if those computers were logged on when the lockout occurred. Also, obtain these log files from the PDC emulator operations master and all domain controllers that may be involved in the account lockout.

   2. Look for Event 675 (Preauthentication Failures) in the Security event log for the domain controllers for the locked-out user account. This event displays the IP address of the client computer from which the incorrect credentials were sent. When you view these events in the Security event log from the PDC, an IP address with Event 675 may be the IP address of another domain controller because of password chaining from other domain controllers. If this is true, obtain the Security event log from that domain controller to see the Event 675. The IP address that is listed in that Event 675 should be the IP address for the client computer that sent the invalid credential.

   3. After you know which client computer is sending the invalid credentials, determine the services, programs, and mapped network drives on that computer. If this information does not reveal the source of the account lockout, perform network traces from that client computer to isolate the exact source of the lockout.



Also have a look at http://technet.microsoft.com/en-us/library/cc738772%28WS.10%29.aspx
vbevinsAuthor Commented:
Had to open a case with Mircosoft to get this one fixed.  Used the command below, we were unfamiliar with this command and it's use didn't come up in any of our searches.   Hope the fix below helps others.

Open Run command line
type in "control keymgr.dll"
Gives you a "Stored User Names adn Passwords"  
Lists all locally stored passwords  on the machine
Highlight and remove

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Outlook

From novice to tech pro — start learning today.