Domain account locked out repeatedly

Posted: 03-05-2008, 01:36 PM

Matsi

Guest
Posts: n/a

Hi,

We have a Windows Server 2003 active directory domain, ISA server with VPN,
and one Windows Vista client. The Vista owner calls me every time he wants to
connect with VPN, and tells me that he cannot. Looking in Active Directory
shows me, that his domain user account is locked out. When I unlock the
account he is able to login. It seems that something (a service? office
2007?) does try to authenticate with wrong credentials, and locks his account
every time it can.

I have the default settings for the account lockout policy, threshold of 3,
and 0 for lockout duration.
This problem is really annoying so much, that I think about to tell him to
uninstall Vista and install XP again. The XP users don't have this problem at
all.

I've looked around in the web and found some other users that have the same
problem. But I found no solution for it.

I don't want to uninstall Vista. If anyone can help or has got an idea, this
would be really be appreciated!

Thank you!

Responses to "Domain account locked out repeatedly"

Robert L. \(MS-MVP\)

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-05-2008, 02:23 PM

To confirm it is Vista issue, create a temp ID to test. Please post back
with the result.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

"Matsi" <Matsi@discussions.microsoft.com> wrote in message
news:E69DEB96-66D8-4A09-8417-0BFA62D3FB45@microsoft.com...

> Hi,
>
> We have a Windows Server 2003 active directory domain, ISA server with
> VPN,
> and one Windows Vista client. The Vista owner calls me every time he wants
> to
> connect with VPN, and tells me that he cannot. Looking in Active Directory
> shows me, that his domain user account is locked out. When I unlock the
> account he is able to login. It seems that something (a service? office
> 2007?) does try to authenticate with wrong credentials, and locks his
> account
> every time it can.
>
> I have the default settings for the account lockout policy, threshold of
> 3,
> and 0 for lockout duration.
> This problem is really annoying so much, that I think about to tell him to
> uninstall Vista and install XP again. The XP users don't have this problem
> at
> all.
>
> I've looked around in the web and found some other users that have the
> same
> problem. But I found no solution for it.
>
> I don't want to uninstall Vista. If anyone can help or has got an idea,
> this
> would be really be appreciated!
>
> Thank you!

Matsi

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-05-2008, 02:44 PM

Thank you for your answer!

What do you mean with "temp ID"? Another domain user account?

"Robert L. (MS-MVP)" wrote:

> To confirm it is Vista issue, create a temp ID to test. Please post back
> with the result.
>
> --

Robert L. \(MS-MVP\)

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-05-2008, 07:51 PM

Correct.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

"Matsi" <Matsi@discussions.microsoft.com> wrote in message
news:20F690EC-26B4-49DB-8BE9-5C4AF6560CF4@microsoft.com...

> Thank you for your answer!
>
> What do you mean with "temp ID"? Another domain user account?
>
>
> "Robert L. (MS-MVP)" wrote:
>
>> To confirm it is Vista issue, create a temp ID to test. Please post back
>> with the result.
>>
>> --

Matsi

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-13-2008, 05:44 PM

I set up a second account and my sales guy tried out to login. It worked and
the account was not locked out. But of course he could not connect to his
exchange mailbox (Because of I did not want to copy his whole Exchange
Mailbox). I mean: could it be the outlook client that has a problem?

Please give me some more time to get more debug output. I want to get traces
with ethreal and want to analyse the Windows server security logs.

Thank you!

"Robert L. (MS-MVP)" wrote:

> Correct.
>
> --
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
>
>

rsyring@gmail.com

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-26-2008, 01:14 AM

On Mar 13, 12:44 pm, Matsi <Ma...@discussions.microsoft.com> wrote:

> I set up a second account and my sales guy tried out to login. It worked and
> the account was not locked out. But of course he could not connect to his
> exchange mailbox (Because of I did not want to copy his whole Exchange
> Mailbox). I mean: could it be the outlook client that has a problem?
>

Please post back if you figure out a solution. Thanks!

> Please give me some more time to get more debug output. I want to get traces
> with ethreal and want to analyse the Windows server security logs.
>
> Thank you!
>
> "Robert L. (MS-MVP)" wrote:
> > Correct.
>
> > --
> > Bob Lin, MS-MVP, MCSE & CNE
> > Networking, Internet, Routing, VPN Troubleshooting on
> >http://www.ChicagoTech.net
> > How to Setup Windows, Network, VPN & Remote Access on
> >http://www.HowToNetworking.com

rsyring@gmail.com

Guest
Posts: n/a

Re: Domain account locked out repeatedly

Posted: 03-11-2008, 03:55 PM

I have the exact same problem between a Vista business client and an
XP server with folder sharing. Vista repeatedly logs in to the XP
server with the wrong credentials until an account lockout is
initiated on the XP server. Both computers are on the same LAN.

I have the "Documents" folder on the Vista client mapped to a share on
the XP server with offline folders enabled.

The event viewer on the XP machine shows repeated login failures
because of bad password and then repeated login failures because of
the account lockout. I have made sure that the network password saved
in the Vista user account is valid.

I had an XP client that mapped the My Documents folder to the same
share on the XP server for years and never had this problem until I
got a Vista client.

On Mar 5, 9:36 am, Matsi <Ma...@discussions.microsoft.com> wrote:

> Hi,
>
> We have a Windows Server 2003 active directory domain, ISA server with VPN,
> and one Windows Vista client. The Vista owner calls me every time he wants to
> connect with VPN, and tells me that he cannot. Looking in Active Directory
> shows me, that his domain user account islockedout. When I unlock the
> account he is able to login. It seems that something (a service? office
> 2007?) does try to authenticate with wrong credentials, and locks his account
> every time it can.
>
> I have the default settings for the account lockout policy, threshold of 3,
> and 0 for lockout duration.
> This problem is really annoying so much, that I think about to tell him to
> uninstall Vista and install XP again. The XP users don't have this problem at
> all.
>
> I've looked around in the web and found some other users that have the same
> problem. But I found no solution for it.
>
> I don't want to uninstall Vista. If anyone can help or has got an idea, this
> would be really be appreciated!
>
> Thank you!

LinkBack

Thread Tools

Display Modes

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Forum Jump

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Account locked	AlanJ	Windows Vista Security	1	04-24-2007 11:00 PM
Transfer domain account files, settings to local account?	Douglas Laudenschlager	Windows XP Configuration & Management	1	05-17-2005 11:15 AM
Lost domain - rejoin domain but account is damaged	Jim Walsh	Windows XP Configuration & Management	1	04-15-2005 09:45 PM
Account Locked out	GT	Windows XP Accessibility	2	11-03-2003 07:20 PM
changed domain to workgroup and now I'm locked out	Need Help	Windows XP Network & Web	3	08-02-2003 09:06 PM