none
User Account in AD is locked but checkbox is not available

    General discussion

  • I am having problems with one particular user account in AD in a Windows 2003 environment. The user account appears to intermittently while the users is working.

     

    The strange part of the problem is when view the Accounts tab on the user account in AD the unlock checkbox is not available. But the Additional Account Info tool shows the User Account as being locked?

    Monday, September 06, 2010 1:59 PM

All replies

  • Try connecting to the PDC Emulator...

    hth
    Marcin

    Monday, September 06, 2010 2:04 PM
  • How many DCs do you have? Any DC replication issues?  Open ADUC and change the Domain Controller and check the status of the user there. 


    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX This posting is provided AS IS with no warranties, and confers no rights. http://publications.sivarajan.com/
    Monday, September 06, 2010 3:50 PM
  • Howdie!
     
    Am 06.09.2010 15:59, schrieb DA_ITGEEK:
    > I am having problems with one particular user account in AD in a Windows
    > 2003 environment. The user account appears to intermittently while the
    > users is working.
    >
    > The strange part of the problem is when view the Accounts tab on the
    > user account in AD the unlock checkbox is not available. But the
    > Additional Account Info tool shows the User Account as being locked?
     
    Are there multiple locations/domain controllers with latent replication?
    Can you connect your management tool (ADUC, ADAC, ...) to the DC the
    client probably uses to authenticate (a DC in the same site?).
    [EDIT] Or better yet, as Marcin suggested, try connecting to the PDC emulator of the domain - it should know the truth about locked out users.
     
    Cheers,
    Florian
     
     

    Microsoft MVP - Group Policy (http://www.frickelsoft.net/blog)
    Monday, September 06, 2010 8:48 PM