none
Skype for Business causing domain AD account locked out RRS feed

  • Question

  • Hi,

    i have deployed Skype for Business to few of my laptop user. 

    They are facing account locked out issue, at first i thought it might be network mapped drive that caused this locked out issue.

    However apparently, it is the SKB that was causing the issue. I tried delete all credential in credential manager but this did not solve my issue.

    Any feedback is appreciated.

    Thanks.

    Wednesday, August 14, 2019 4:22 PM

All replies

  • Hi min777,

    In my experience, it may lock out a user if:

    1) A user changed his password recently,

    2) The user has previously checked the "save my password" / "remember my credentials" box for SFB client.

    I suggest you could try the following steps to see if it helps:

    1. Ensure that the AD account is not locked.

    2. On the client side, delete the sip user profile cache:  %useprofile%\AppData\Local\Microsoft\Office\1x.0\Lync\sip_xxx

    Related Registry Key: HKCU\Software\Microsoft\Office\1x.0\Lync\UserName@Domain.com

    Client certificate: Run “Certmgr.msc”, go to certificate store “Personal” – “Certificates” – Delete the client certificate “user@domain.com”.

    Remove cached credentials under Credential Manager.

    3. Try to login the SFB client, if it prompts for the user password, type the new one. Then check if the user is not locked.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Thursday, August 15, 2019 2:45 AM
    Moderator
  • Hi Shaw,

    Thanks for the info.

    1) user hasn't change his password

    2) yes, the password is stored so that SKB can sign in automatically for them. i followed the guide to remove the cache, but the problem still occur. the weird part is the account locked out only occured if i open the outlook together with SKB.

    Scenario:-

    Connected to VPN and enabled proxy connection. open SKB and sign in success. User account not locked out. When i open outlook 2010, my domain account is locked out immediately. is there a way i can separate outlook and SKB so they that wont link?

    Thursday, August 15, 2019 3:43 AM
  • Hi min777,

    Which version of Skype for Business client do you use, Lync 2010, Skype for Business 2015/2016?

    Do you use the same account for Outlook and Skype for Business client?

    Did it only happen on the VPN client?

    Please check the lock reason for the user in AD security Event.

    Please have a try to recreate the Outlook profile with the default account same as the SFB account.

    And in SFB client option, you could unselect the options under “Exchange and Outlook integration”.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Thursday, August 15, 2019 8:23 AM
    Moderator
  • Hi Shaw,

    I'm using Skype for business 2016 and outlook 2010.

    The outlook and skype for business is two different ID. And the SKB is using ID from C@xxx.onmicrosoft.com while outlook is c@xxx.com

    Yes, it only happen to VPN client and the lock reason in AD security is 4625 with logon type 3.

    In SFB client, the exchange and outlook integration at general tab are already deselect, but account still locked out.

    Thanks.

    Thursday, August 15, 2019 12:59 PM