Solved

Domain account locked while connected to VPN

Posted on 2014-03-20
3
484 Views
Last Modified: 2014-03-27
I have a user whose domain account locks every few seconds while he is connected to the company VPN from his laptop at home. I've made sure the account is not logged in anywhere else, removed all cached credentials from Windows Credentials Manager and reset his password. I've checked the DC's Security Log and there are no Audit Failures involving his laptop or user account and other users are connected to the VPN without any issues. Malware scans have found no infections.

The DC is a Windows 2008 R2 that is hosting the VPN.
0
Comment
Question by:SBSWIZARD
3 Comments
 
LVL 16

Accepted Solution

by:
R. Andrew Koffron earned 500 total points
ID: 39943008
if it's an SBS machine check active sync stuff a iPad or cell phone might be hitting it with the wrong credentials.

restart IIS, and it'll break the link with device if the password is change.
0
 

Author Comment

by:SBSWIZARD
ID: 39943734
The server is not an SBS box and the client uses a hosted exchange server.
0
 
LVL 26

Expert Comment

by:Thomas Zucker-Scharff
ID: 39945108
On our exchange server (not SBS) if the user has activesync devices and changes their exchange password they get locked out due to the devices trying to continually sync to the exchange account.  The best way to alleviate this is for the user to severe the connection of their activesync devices (phones, pads, etcetera) either by turning them off or deleting the mail account.  Once the password has been successfully changed and verified on owa, they should resetup their activesync devices.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Destination host unreachable 12 69
Troubles Logging On Creating New Profile 3 47
file name warning 4 26
Get SMB version on Windows 7 3 15
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now