I've had similar problems but they are caused by imaging software (Altiris - Ghost - etc) that reloads an old image and registry causing the machine password to be out of sync the next time it tries to validate with the DC. Validation is every 30 days so the time between a reimage and password failure can be anywhere from 1-29 days. Taking the machine out of the domain and back in resets the password and fixes the problem. There is a KB article (154501) that speaks of removing the password checking function but there are the security concerns about doing such.
-----Original Message----- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, May 12, 2005 9:40 AM To: [email protected] Subject: [ActiveDir] Lockouts Hello all... I am running Active Directory on a 2000 Server fully spacked. I have users (Random) getting locked out frequently. While I am searching for reasons as to why this is happening, I am curious if there are any tools that will show me my user's status. I using MS's account lockout tool, but it only shows me one user at a time. I would like to see all at once. Any tools like that out there? Anyone experienced this? I can find nothing of note in my event logs either. Thanks John Parker, MCSE IS Admin. Senior Technical Specialist Alpha Display Systems. Alpha Video NOTICE OF CONFIDENTIALITY This document and its attachments are intended for the named addressee(s) only. They contain information which may be Confidential, privileged and/or exempt from disclosure. Unless you are the named addressee (or authorized to receive this document and/or its attachment(s) or its contents on behalf of the addressee,) you may not read, copy, use, or disclose the document and/or its attachment(s) or its contents. The unauthorized use, copying or disclosure of this document and/or its attachment(s) or its contents is strictly prohibited and may be unlawful. Alpha Video and Audio inc. disclaims any responsibility in relation to the information in this e-mail message. No rights can be derived from this message. Messages and attachments are not scanned for all known viruses. If you have received this document and/or its attachment(s) by mistake, please notify the sender by telephone immediately at 952-896-9898 or by e-mail at [EMAIL PROTECTED] and destroy immediately all physical and/or electronic copies of the document and its attachment(s). List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
