We just went over this a couple weeks ago. Is there anywhere else she might
be logged in to? Any service accounts using her login ID? An Outlook session
on another PC she used? Do the logs on the DC (assuming you only have one or
two) show anything? They might show which machine the accounts is being
locked out from.

Dave Lum - [EMAIL PROTECTED]
Sr. Network Specialist - Textron Financial
503-675-5510


-----Original Message-----
From: Johnny [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 25, 2003 06:34 AM
To: NT 2000 Discussions
Subject: Account lock outs


Hi,

I have an account in a domain that keeps getting locked out every couple
of hours.  The group policy for the domain says lock out the account after
5 failed logon attempts.  Of course this person is just sitting at her
desk.  In her event logs I noticed that routinely she gets the message
security settings in the group policy object applied successfully
(paraphrasing there).  I'm not sure if it is after the application of this
policy that she gets locked out.  For testing, I bumped up the failed
login attempts to 20 and she wasn't locked out this morning.

Is there anythingelse aside from failed login attempts that can lock out
and account?  Is this a strong indicator that someone might be trying to
figure out her password or is that just paranoia talking?  It only started
happening this past week.

Any help would be appreciated.

Thanks,

John

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to