try running dumpsec and see what time they were locked out ?
thanks,
Scott Lever
IT Specialist, IBM CLS Project
Windows NT Team
IBM UK Ltd, Portsmouth - MailPoint F3J
Email: [EMAIL PROTECTED]
Desk: 255079
[EMAIL PROTECTED]
om (Jacob) To: "NT 2000 Discussions"
<[EMAIL PROTECTED]>
Sent by: cc:
bounce-nt2000-137310@l Subject: RE: All accounts locked
out at the same time.
s.swynk.com
18/07/2002 15:50
Please respond to "NT
2000 Discussions"
Nope... Date and time correct. Strange. Going to spend all day
researching this one...
At 08:43 AM 7/17/2002 -0400, you wrote:
>Any possibility that system time/date was changed? If so, that could
expire
>everyone's password at once.
>
>Just a guess...
>
>Bob
>
>-----Original Message-----
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, July 16, 2002 6:54 PM
>To: NT 2000 Discussions
>Subject: All accounts locked out at the same time.
>
>This has stumpped me...
>
>Every account in the domain controller was just locked out. Usually I get
>a couple a month. Even those that have the day off or have left early had
>their account locked out.
>
>Event log shows a couple of unsuccessful logons from users and computer in
>here and tons of successful logons. The successful logons where from
>legitimate machines and users here. This happened to every ones account
at
>the same time.
>
>Any ideas?
>
>Jacob
>
>
>------
>You are subscribed as [EMAIL PROTECTED]
>Archives: http://www.swynk.com/sitesearch/search.asp
>To unsubscribe send a blank email to %%email.unsub%%
>
>CONFIDENTIALITY NOTICE: This E-Mail is intended only for the
>use of the individual or entity to which it is addressed and
>may contain information that is privileged, confidential and
>exempt from disclosure under applicable law.
>If you have received this communication in error, please
>do not distribute and delete the original message.
>Please notify the sender by E-Mail at the address shown.
>Thank you for your compliance.
>
>------
>You are subscribed as [EMAIL PROTECTED]
>Archives: http://www.swynk.com/sitesearch/search.asp
>To unsubscribe send a blank email to %%email.unsub%%
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
