"Also (the
kicker) his account has the "password never expires" set to never
expire"
This will have no effect on being able to lockout his
account. His account is being locked out not expiring. They are two
different things.
Are there any services that running under his domain
account? Your getting no hits from either DC using the lockout status
tool?
Mike
From: Mike Hogenauer
[mailto:[EMAIL PROTECTED]
Sent: Friday, April 02, 2004 1:19 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Vice pres Account Lockout ?
Sent: Friday, April 02, 2004 1:19 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Vice pres Account Lockout ?
HELP.....
I'm having a serious Account lockout problem!!
The VP of my company's account gets locked out every time he changes his
password.
This time I had him log off all terminal Server sessions, he rebooted his
system, and still his account gets locked out. Also (the kicker) his
account has the "password never expires" set to never expire.
I've used the account lockout tool, and also ran a search on LDAP to look
for multiple entry's of his account, still no clues...
Could it be a policy running somewhere that I'm missing?
I've also set the account lockout policy settings to 50 invalid login
attempt and I've disabling this policy before, still nothing seems to work.
We're running a native 2000 single site
domain with 2 domain controllers.
ANY help is greatly appreciated..
Thanks in advance.
Mike
