• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 325
  • Last Modified:

Exchange 2003 asking 1 of 600 users for their password

The user is not locked in AD (I used LockoutStatus.exe to verify she is not locked out on any of the domain controllers).  User was able to access just fine on Friday.  She was off yesterday and today it is prompting her for her password like she is locked out.  I am going to start combing through the Even Logs but any help would be appreciated.

We have Exchange 2003 in a 2008 R2 domain.
0
rkeith2412
Asked:
rkeith2412
  • 4
  • 3
  • 2
  • +2
4 Solutions
 
Miguel Angel Perez MuñozCommented:
Try resetting user password make logoff and logon again.
0
 
pony10usCommented:
Does this happen regardless of where the user logs in (what machine)?

Are you using Outlook as a client? If so, what version? There is a setting to always ask for credentials that may be enabled.
0
 
rkeith2412Author Commented:
Here is what I see in the event log.


Object Open:
       Object Server:      Microsoft Exchange
       Object Type:      Microsoft Exchange Logon
       Object Name:      /o=DOMAIN/ou=DOMAIN/cn=Recipients/cn=username
       Handle ID:      -
       Operation ID:      {0,1838916545}
       Process ID:      3412
       Process Name:      D:\Exchsrvr\bin\store.exe
       Primary User Name:      SERVER$
       Primary Domain:      DOMAIN
       Primary Logon ID:      (0x0,0x3E7)
       Client User Name:      username
       Client Domain:      DOMAIN
       Client Logon ID:      (0x0,0x6D9B7199)
       Accesses:      Unknown specific access (bit 8)
                  
       Privileges:      -

       Properties:
---
            %{ab721a54-1e2f-11d0-9819-00aa0040529b}
      %{bf967aba-0de6-11d0-a285-00aa003049e2}

       Access Mask:      0


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Check for any cached credentials and what is the Logon server for the client machine

Start -> Run -> COntrol keymgr.dll

- Rancy
0
 
rkeith2412Author Commented:
The user's password has been reset, but I don't know if she has logged off or not.

This happens in Outlook 2007 and OWA.  Outlook is not set to ask for credentials every time.

I have not asked he to try a different machine, she is a Senior VP so I can't have her running around logging into other machines, I am tied to this one machine.
0
 
Sushil SonawaneCommented:
This issue occurs when one of the following conditions is true:•Your password has expired.

Your administrator has set the User must change password at next logon option for your user account.

Please refer below article.
(http://support.microsoft.com/kb/895276)
0
 
pony10usCommented:
sushil84:

Wouldn't this cause the AD account to get locked out?
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
The user's password has been reset, but I don't know if she has logged off or not - Ideally this should be done as the Widows login and Outlook arent on the same page :)

How many DC\GC do you have and not sure if there is some replication\sync issues ?

If possible can we have the machine restarted and try with login ...

- Rancy
0
 
rkeith2412Author Commented:
We have 3 DCs and all are GC.  I will have her reboot as soon as she is available.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Also do check for any cached credentials

Start -> Run -> COntrol keymgr.dll

- Rancy
0
 
rkeith2412Author Commented:
Thank you all for your help.  Rebooting didn't work but she has decided to just enter her credentials until we migrate to Exchange 2010 over the next couple months.  She is happy so I am happy.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now