Nsingh007
asked on
Accounts locking out After installing win2008 r2 DC's
I manage a domain that is part of a forest. At the hub site, i removed the 2003 DC's and replaced them with 2008 R2 DC's. on the sites, 12 of them i still have 2003 DC'S running. Now I have an influx of account lockouts. How do i fix this? Can 2008 and 2003 work well together, Are the gpo's compatible.
ds001 is the is the pdc emulator and rid master, ds002 is the infrastructure master, bot are global catalogs.
ds001 is the is the pdc emulator and rid master, ds002 is the infrastructure master, bot are global catalogs.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i will change the password policy and see if this works
ASKER
This is what it looks like now, when i installed 2008r2, the only difference was that the password length was 8, which i changed to six
Policy Setting
Enforce password history 14 passwords remembered
Maximum password age 60 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Disabled
Account Policies/Account Lockout Policyhide
Policy Setting
Account lockout duration 0 minutes
Account lockout threshold 3 invalid logon attempts
Reset account lockout counter after 1440 minutes
Account Policies/Kerberos Policyhide
Policy Setting
Enforce user logon restrictions Enabled
Maximum lifetime for service ticket 600 minutes
Maximum lifetime for user ticket 10 hours
Maximum lifetime for user ticket renewal 7 days
Maximum tolerance for computer clock synchronization 5 minutes
Policy Setting
Enforce password history 14 passwords remembered
Maximum password age 60 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Disabled
Account Policies/Account Lockout Policyhide
Policy Setting
Account lockout duration 0 minutes
Account lockout threshold 3 invalid logon attempts
Reset account lockout counter after 1440 minutes
Account Policies/Kerberos Policyhide
Policy Setting
Enforce user logon restrictions Enabled
Maximum lifetime for service ticket 600 minutes
Maximum lifetime for user ticket 10 hours
Maximum lifetime for user ticket renewal 7 days
Maximum tolerance for computer clock synchronization 5 minutes
ASKER
Still having account lockouts
What other roles does ds001 have? is it the ony Global Catalog? you can try demoting it and re promoting it.
ASKER
No, I have two global catalogs, ds002 is also a gc and infrastructure master
Ok. Try unplugging ds001 drom the net work and see if thry stop
ASKER
This solution worked perfectly, THANK YOU.
ASKER