none
User Account Locks out repeatedly RRS feed

  • Question

  • Hi All,

    Many users are complaining that there NT Accounts are getting locked out frequently and when i check in the ADUC (Active directory users and Computers Console), it shows the account is not locked but when i see the account status in the Account Lockout too, it shows as locked which is very wierd and i had to use the account lockout tool to unlock the account. Also i see the value of Lockout time attribute is not Zero in ADSIedit before i unlocked the A/C

    We use SUN IDM to synchronize passwords and need to know why the account is not showing as locked in the ADUC.

    Thanks
    Sterling

    Friday, December 3, 2010 1:58 PM

Answers

  • Hello,

    in addition to the other already given information, also Conficker Virus can result in account lockouts:

    http://support.microsoft.com/kb/962007


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Proposed as answer by Ricsao Thursday, December 9, 2010 6:17 AM
    • Marked as answer by Mervyn ZhangModerator Monday, December 13, 2010 2:12 AM
    Friday, December 3, 2010 5:23 PM
  • Sterling,

    as far as I recall, account lockout is a subject to urgent replication to the PDC Emulator and DCs in the same site as the PDC Emulator - for other DCs, it follows regular replication schedule. In your case, you migth be connecting to a DC that simply hasn't received the updated lockout status via AD replication.

    Connect either to the PDC emulator or to a DC in its site - or to the authenticating DC...

    hth
    Marcin

    Friday, December 3, 2010 2:03 PM
  • Hi,

     

    Saved password may cause this kind of account lockout. Scheduled Task, Services or applications may contains saved password, you may ask your user to check and update saved password regularly.  

     

    Please follow the following guide to troubleshoot this issue if it still occurs:

     

    Troubleshooting account lockout the PSS way

    http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx

     

    Thanks.

     


    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, December 6, 2010 7:20 AM
    Moderator

All replies

  • Check out an article I have on troubleshooting this issue at:

    http://www.pbbergs.com/windows/articles.htm

    Select USer Account Lockout Troubleshooting

     

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs

    Please no e-mails, any questions should be posted in the NewsGroup This
    posting is provided "AS IS" with no warranties, and confers no rights.

    Friday, December 3, 2010 2:01 PM
    Moderator
  • Sterling,

    as far as I recall, account lockout is a subject to urgent replication to the PDC Emulator and DCs in the same site as the PDC Emulator - for other DCs, it follows regular replication schedule. In your case, you migth be connecting to a DC that simply hasn't received the updated lockout status via AD replication.

    Connect either to the PDC emulator or to a DC in its site - or to the authenticating DC...

    hth
    Marcin

    Friday, December 3, 2010 2:03 PM
  • Hello,

    in addition to the other already given information, also Conficker Virus can result in account lockouts:

    http://support.microsoft.com/kb/962007


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Proposed as answer by Ricsao Thursday, December 9, 2010 6:17 AM
    • Marked as answer by Mervyn ZhangModerator Monday, December 13, 2010 2:12 AM
    Friday, December 3, 2010 5:23 PM
  • Hi,

     

    Saved password may cause this kind of account lockout. Scheduled Task, Services or applications may contains saved password, you may ask your user to check and update saved password regularly.  

     

    Please follow the following guide to troubleshoot this issue if it still occurs:

     

    Troubleshooting account lockout the PSS way

    http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx

     

    Thanks.

     


    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, December 6, 2010 7:20 AM
    Moderator
  • Hi,

    Do you need any other assistance? If there is anything we can do for you, please let us know.

    Thanks.


    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, December 9, 2010 3:13 AM
    Moderator