Johnny, I had this problem a few weeks ago. I didn't find out who or
what was locking out the account, however as soon as I made the user
change his password to a complex password it seemed like the problem
went away. It was kind of strange because around the same time that the
user account was getting locked out we found out that our email server
got hacked into, causing me to have to reinstall w2k and e2k. (sorry
didn't want to break that bad news). Hopefully nothing too serious has
happened on your end. There's a site that Roger recommended me to, it's
www.sysinternals.com. There is a util called pstools.exe. With this
tool, you can do many things, one of them being that you can find out if
the user is logged on multiple times onto the network and where she is
logged on. Hope this helps.

John

-----Original Message-----
From: Kim Schotanus [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 25, 2003 6:40 AM
To: NT 2000 Discussions
Subject: RE: Account lock outs

How can you check that Malcolm?


-----Original Message-----
From: Malcolm Reitz [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 25, 2003 15:38
To: NT 2000 Discussions
Subject: RE: Account lock outs


Have you confirmed that the user is not logged on to another computer
besides the one at her desk?

Malcolm
-----Original Message-----
From: Johnny [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 25, 2003 8:34 AM
To: NT 2000 Discussions
Subject: Account lock outs

Hi,

I have an account in a domain that keeps getting locked out every couple
of hours.  The group policy for the domain says lock out the account
after 5 failed logon attempts.  Of course this person is just sitting at
her desk.  In her event logs I noticed that routinely she gets the
message security settings in the group policy object applied
successfully (paraphrasing there).  I'm not sure if it is after the
application of this policy that she gets locked out.  For testing, I
bumped up the failed login attempts to 20 and she wasn't locked out this
morning.

Is there anythingelse aside from failed login attempts that can lock out
and account?  Is this a strong indicator that someone might be trying to
figure out her password or is that just paranoia talking?  It only
started happening this past week.

Any help would be appreciated.

Thanks,

John

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to