In addition to what Tony said you should investigate what the users are doing at the time the account lockouts. In some cases account lockouts occur when an app that has cached the users credentials has not updated them. Because of that the app tends to send the old credentials to the DC and locks the account out. If the clients are using OWA you may want to reset the IIS token cache. http://support.microsoft.com/default.aspx?scid=kb;en-us;Q173658 discusses resetting that cache. You should also verify that replication is working properly. If you have sites make sure that you unlock the users account on a DC within the clients so that you don't have to worry about the replication delay between sites.
Tim Hines, MCSA, MCSE (2000 & NT4) MVP - Active Directory ----- Original Message ----- From: "Tony Murray" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 22, 2002 6:41 AM Subject: Re: [ActiveDir] 98 user account lockouts > The Account Lockout Status (ALS.EXE) tool from Microsoft is great for tracking the status of locked accounts. It provides a whole lot of information about where and when the lockout occurs, number of bad pw attempts, etc. It's available from PSS. > > There are also a number of DC improvements in SP3 regarding account lockouts, so it might be worth updating if you have not already done so. > > Tony > > ---------- Original Message ---------------------------------- > From: [EMAIL PROTECTED] > Reply-To: [EMAIL PROTECTED] > Date: Tue, 22 Oct 2002 10:26:30 +0100 > > > Hi All, > > We have just performed an acquisition of a company with many 98 clients, > the software they used will only run on 98. The problem I am getting is > that their domain accounts seem to be locking out every couple of hours. > This problem did not occur with NT DCs. > > This is happening on 'all' the machines - any ideas why? > > Robert Rutherford > > > > > ******************************************************************** > This E-mail and any files transmitted with it are in > commercial confidence and intended solely for the use of > the individual or entity to whom they are addressed. > If you have received this E-mail in error please notify the > Administrator by E-mail ([EMAIL PROTECTED]). > > Any views or opinions expressed are solely those of the > author and do not necessarily represent those of > DEK Printing Machines Ltd., or its affiliates. > ******************************************************************** > This footnote signifies that this message has been > checked for viruses using Norton and McAfee. > ******************************************************************** > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
