Solved

One user keeps getting locked out of their account, Outlook keeps asking for her username and password (Exchange 2010)

Posted on 2016-10-25
5
84 Views
Last Modified: 2016-10-25
We use Exchange 2010 and Outlook 2010 here (Windows 7 64 bit OS).  I have one user where Outlook keeps asking for her username and password upon starting the program.  We enter the username and PW, click the box to keep credentials but it keeps popping up.

If she locks her PC or it times out and locks itself, she is automatically locked out of her account, I then have to unlock her.  This happens if Outlook is open or closed.  If she is logged out, it seems to be ok and she can log in in the morning.  But once logged in, it the computer goes to sleep (locks) or she manually locks it, she is locked out and I need to unlock her in AD.

She can receive email on her phone just fine, it just won't stay connected on the PC.

I tried resetting her PW in AD multiple times but it still doesn't work.  I uninstalled/reinstalled Office and that didn't change anything.  The next thing I was going to try was deleting and recreating her profile on the PC but before I did that, I wanted to see if there was anything else I could try.
0
Comment
Question by:g8rcub
  • 3
5 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 41858593
If you haven't already, enable logon auditing and see if someone (inside or outside the organization) or something (a forgotten tablet or phone) is trying to log in as her.
0
 

Author Comment

by:g8rcub
ID: 41858688
Logon auditing is enabled in the default domain controllers policy (Success, Failure).  I'm not sure how to pull the logs though, I messed around in the Exchange Power Shell but can never seem to get the command correct.

Actually, the user did lose her phone about a month ago.  And this all started happening once we added the Exchange account to her new phone last week.

I went in to the EMC and removed all her past phones from Exchange, didn't remote wipe, just removed the partnership.  When she is back in the office today, I may remove this new phone and then re-add to see if that works.
0
 
LVL 3

Accepted Solution

by:
Exchange User earned 500 total points
ID: 41858845
Please note that if you change your AD password, you need to update your password to anywhere your old password was cahced in. Any internal web portals that require domain credentials or any apps that integrate with the AD in your environment ? Even check with the user if she has any remote desktop sessions saved.

You can try what Paul suggested and additionally, you can try a tool called Account Lockout Examiner from Netwrix. It gives you a bit more detail without digging much.
0
 

Author Comment

by:g8rcub
ID: 41859008
Oh yes, every time anyone changes a PW, I make sure they change it on any device they have connected to our Exchange account.

I checked the Terminal Server 1st to make sure she wasn't signed on there and she was not.  So I downloaded Account Lockout Examiner as you suggested and this helped me solve the issue (so far so good anyway!).

Account Lockout Examiner showed me her getting locked out immediately, and the program showed the workstation was a virtual machine we have running here that people connect to from the desktop of our Terminal Server.  People rarely use this virtual box, we run a specific software on it, but she is one of the users that does use this box.  She must have never logged out the last time she used it.  There were updates to be applied on the virtual box so I restarted the machine to apply them (which in turn disconnected her session on that box).  

It has been a half hour and so far, Outlook has not asked for her credentials and she is not being locked out anymore.  I also removed her phone account from Exchange and re-added it with no issues.  Emails are coming through to both PC and phone.

I guess that was it.  She was connected to that virtual box, must have had a connection to Outlook running on it, and when we changed the PW, it started to lock her out there.  Thank you for the info on a great tool!  This was driving me crazy.
0
 

Author Closing Comment

by:g8rcub
ID: 41859012
Thank you!  Account Lockout Examiner is another great tool I have in the arsenal now.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now