PDA

View Full Version : Account automatically Locked out

Rob
I have and AD account within a windows 2000 domain that
is constantly being Locked out. As I've looked at the
user with the Account lockout tool, I can see that AD is
counting up to 6 bad Pwd counts before it locks it.

I previously had a GPO set to Lock users after 6 bad pwd
counts but I have already disabled that in the GPO. But
when testing my username with 6 bad pwd's I will be
locked out as well.
I have the GPO replicated to several servers in the
domain but this is only happening to this one user.

Is there any other place I could possibly find why this
username is counting bad logins and why the lockout
policy is still in effect.

Thank you,
Rob
Matjaz Ladava [MVP]
Is your account lockout policy not defined or dissabled ? It must be
dissabled.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
matjaz@ladava.com, matjazl@mvps.org
http://ladava.com

"Rob" wrote in message
news:507001c3e51c$6f706df0$a101280a@phx.gbl...
> I have and AD account within a windows 2000 domain that
> is constantly being Locked out. As I've looked at the
> user with the Account lockout tool, I can see that AD is
> counting up to 6 bad Pwd counts before it locks it.
>
> I previously had a GPO set to Lock users after 6 bad pwd
> counts but I have already disabled that in the GPO. But
> when testing my username with 6 bad pwd's I will be
> locked out as well.
> I have the GPO replicated to several servers in the
> domain but this is only happening to this one user.
>
> Is there any other place I could possibly find why this
> username is counting bad logins and why the lockout
> policy is still in effect.
>
> Thank you,
> Rob


Rob
There is only a check box to not define the setting. I
figured out that if I check the box to defice the setting
and place a 0 in the box that the accounts will not lock
out. I will see how this works.

Thanks for the help,
Rob

>-----Original Message-----
>Is your account lockout policy not defined or
dissabled ? It must be
>dissabled.
>
>--
>Regards
>
>Matjaz Ladava, MCSE, MCSA, MCT, MVP
>Microsoft MVP - Active Directory
>matjaz@ladava.com, matjazl@mvps.org
>http://ladava.com
>
>"Rob" wrote in
message
>news:507001c3e51c$6f706df0$a101280a@phx.gbl...
>> I have and AD account within a windows 2000 domain that
>> is constantly being Locked out. As I've looked at the
>> user with the Account lockout tool, I can see that AD
is
>> counting up to 6 bad Pwd counts before it locks it.
>>
>> I previously had a GPO set to Lock users after 6 bad
pwd
>> counts but I have already disabled that in the GPO. But
>> when testing my username with 6 bad pwd's I will be
>> locked out as well.
>> I have the GPO replicated to several servers in the
>> domain but this is only happening to this one user.
>>
>> Is there any other place I could possibly find why this
>> username is counting bad logins and why the lockout
>> policy is still in effect.
>>
>> Thank you,
>> Rob
>
>
>.
>