none
Password expires every hour

    Question

  • Hello 

    There are few users complaining that every two hours expires and when they lock the screen and unlock , they have to reach helpdesk and reset the password.

    As a AD admin any thing do i need to look at.

    Aamir


    NA

    Friday, January 13, 2017 2:51 PM

Answers

All replies

  • This could be a few different things. What's your account lock policy?

    Friday, January 13, 2017 6:21 PM
  • It seems that their accounts are getting locked so I would advise to check on your lockout policy first. To troubleshoot the lockout reason, you may want to refer to this: https://dirteam.com/paul/2012/04/23/user-account-lockout-troubleshooting/

    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    Sunday, January 15, 2017 11:53 PM
  • Hi
      These are possibilies about lockout issue,
    -Mapped network drives
    -Logon scripts that map network drives
    -RunAs shortcuts
    -Accounts that are used for service account logons
    -Processes on the client computers
    -Programs that may pass user credentials to a centralized network program or middle-tier application layer
    -Active sync devices (cell phone,etc..)  

    and you can check the source with Account Lock tool (for server 2003); https://www.microsoft.com/en-us/download/details.aspx?id=15201
     New tools to troubleshoot this in Windows Server 2008 R2,called dsac.exe which is the "Active Directory Administration Centre"..check the article for; https://blogs.technet.microsoft.com/askds/2011/04/12/you-probably-dont-need-acctinfo2-dll/
    also you can check with these 3rd paty tools; lepide,netwrix....

    and you can configure advanced audit policy to find the source;

    https://technet.microsoft.com/en-us/library/dd408940%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    https://technet.microsoft.com/en-us/library/jj852202(v=ws.10).aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Monday, January 16, 2017 7:14 AM
  • As said above, the issue may cause due to account lockout.

    Here is another informative resource which explains step-wise instructions to resolve account lockout issue - https://www.lepide.com/blog/what-are-the-common-root-causes-of-account-lockouts-and-do-i-resolve-them/

    Monday, January 16, 2017 10:21 AM
  • Hi,

    I am checking how the issue going, if you still have any questions, please feel free to contact us.

    And if the replies as above are helpful, we would appreciate you to mark them as answers, and if you resolve it using your own solution, please share your experience and solution here. It will be greatly helpful to others who have the same question.

    Appreciate for your feedback.

    Best regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, January 20, 2017 9:31 AM
    Moderator
  • Hello

    It was sync issue between source system and AD&LDAP. and it is resolved now


    NA

    • Marked as answer by Masthanomatic Tuesday, January 24, 2017 1:33 PM
    Tuesday, January 24, 2017 1:33 PM