I should have expanded on my reason for asking about the clients. As soon as we went to SP4, we were getting a lot of these lockouts, all on Win9x clients (we don't have any NTW). W2K and above were fine. I called MS Support and they gave me a new version of the AD Client. With that installed, the problem was fixed. No issues since. Sup Services said this new version of the client fixed "a lot" of lockout issues.
Obviously, this isn't the solution if Mike only has W2K and/or WXP clients. <mc> List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
