Printable View
Hey guys,
Need your wisdom.
I have this one user that keeps getting locked out every time he restarts his PC.
We have a 3 wrong entry lockout system but every time on restart , we have to unlock this account as it gets locked out.
Any reason why this would happen?
His PC - Vista fully updated
Server - 2k3 with AD.
If he has mapped drive set to automatically reconnect and the saved passwords are wrong, that would do it.
Or..,....maybe there is something wrong with the keyboard...where a key either doesnt work or...enters mulitple characters
MLF
Yeah he does have mapped drives.
I have asked him to delete them and then restart to try and reproduce.
However, if he logs in fine, wouldn't those credentials be used for the mapped drives?
MLF - if what you are saying is true, then he wouldnt be able to log in?
I guess so...maybe he is just typing in his password wrong.
I have a keyboard that is slow in response and I regulary mistype passwords because of it.
What version of Vista is this...just curious.
MLF
Vista business.
I would agree he could be typing his password wrong but doubt it ...
We have other people in the office with mapped drives and dont have an issue.
He may be logged in on another machine with the old password. That will lock him out if the password changes.
I read somewhere that if the machine then is not correctly added to the domian ...this issue will occur.
MLF
MLF may be onto something.Quote:
However, if he logs in fine, wouldn't those credentials be used for the mapped drives?
I recall being at a client and having a similar issue with one of my laptops. I had a several mapped drives for different work/internal departments at this large client of mine. All the mappings were using my domain account (w/ the auto reconnect feature). However, because my laptop was not part of their domain, it was using my old credentials for some reason and as a result, I got locked out upon changing my password. Deleting the mapped drives worked. I simply built a script for each department with NET USE statements without credentials and I let it prompt me. Kinda of a pain, but it worked.
That is until they found out I was using my laptop instead of their P.O.S. ;)
Ron, why so blue?
(Sorry, couldn't help it. Should have tried harder, eh?)
Officially... an old fart, I suppose.. I anxiously await the arrival of my AO AARP Card. ;)Quote:
It shows what category of member you are. Blue is a senior member, red is an administrator and purple is a moderator.............. all the rest are black.
On the other hand it could mean that we have marked your card and the NSA are watching............?
:drink: Super dooper v9.0 decoder ring is in the mail. ;)Quote:
Originally Posted by Cheap Scotch Ron
I had a contract with this sorta of situation. The problem with login credentials was caused by both 2000 and 2003 domain controllers. The admin couldn't not understand it either and was replaced. Expensive Microsoft hotline numbers suggested recreating the account onto the new domain. I had to do it for all users. This is the same company that made history with Microsoft to increase the number of cells in Excel because microcrap think you run "cheap" stuff. This was a corporate-wide project to change a simple domain name for 1,000+ machine and multi-users.
He deleted the mapped drives. The day after that, same result. However today he says he wasn't locked out.
I will monitor for the rest of the week , if he gets it again. Ill just recreate on the domain.
Thanks for the feedback.
I just had a user that was locked out and the domain was cached, he could login but kept getting all many of issues with mapped drives, etc. Once the account was reset and he changed his password it was fine.
Thanks,
He still has the same issue though.
He uses backup software on his local PC. Think Norton Ghost and that has a password saved which might cause the lockout, not sure.
Sounds like your client is a power user. It could very well be the backup software brute forcing a share drive. Have you checked his print shares? You know...regedit has remote functionality; Maybe you could take a snapshot of the registry before and after the reset to see\compare what's going on. Have you rebuilt the profile on the local machine?
Is this person the only person effected? if so, watch them like a hawk and document. Remind your luser that "they" must work like the other sheeps.
Remove machine from the domain...
reboot
login with local admin rights...add machine to Domain
(with domain admin user and password)
reboot
MLF
This is what I have been trying to say but you missed a step.Quote:
Originally Posted by morganlefay
After you change domains, it will create 2 account id's with the same username but with an appended domain extension. The problem is probably happening when you backup the profile from the old account onto the new one when you use Microcrap solution. That old "DNA" will be imported into the new account -- lockout. You have to be crazy to have Microcrap automate this... it can't copy 1,000 files over if it encounters 1 error and aborts. Plus when copying profiles with their method, it gives the illusion that the computer crashed.... looks bad to a customer who expects you to fail.
With winblows, you have to reboot after making system changes.
just copy: desktop, bookmarks, my documents, some hidden folders in the user's old profile for software. Manual remap those drive mappings and printers.
Do your corporate apps Phone home or looks into a shared folder for updates? That could happen without the user being aware. Could be your software inventory app needs to be adjusted as well.
its not that hard copying a profile over.........and not necessary if roaming profiles are in use.
The only problem I have had is duplicate machine names....easy enough to overcome.
For some reason the machine wasnt proper added to the AD......just really easy to blame MS for what is probably user error.
rant on> Linen0ise...my customers dont expect me to fail.....maybe yours do because of your poor attitude....if you dont like MS....dont run it , support it, or rant on about it...you have a choice....although I have a feeling it always easier to place the blame on MS for every fooking problem in the world.
<rant off
MLF
[QUOTE=morganlefay;948202
rant on> Linen0ise...my customers dont expect me to fail.....maybe yours do because of your poor attitude....if you dont like MS....dont run it [/QUOTE]
you a queer...... maybe they dont expect you to fail but behind your back they are damning you. I gave dude a good, in-depth answer.... you come back crying. Not bad helping out keyboard Nazis with mod rights.
Quote:
I had a contract with this sorta of situation. The problem with login credentials was caused by both 2000 and 2003 domain controllers. The admin couldn't not understand it either and was replaced. Expensive Microsoft hotline numbers suggested recreating the account onto the new domain. I had to do it for all users. This is the same company that made history with Microsoft to increase the number of cells in Excel because microcrap think you run "cheap" stuff. This was a corporate-wide project to change a simple domain name for 1,000+ machine and multi-users.
Quote:
Sounds like your client is a power user. It could very well be the backup software brute forcing a share drive. Have you checked his print shares? You know...regedit has remote functionality; Maybe you could take a snapshot of the registry before and after the reset to see\compare what's going on. Have you rebuilt the profile on the local machine?
Is this person the only person effected? if so, watch them like a hawk and document. Remind your luser that "they" must work like the other sheeps.
Quote:
This is what I have been trying to say but you missed a step.
After you change domains, it will create 2 account id's with the same username but with an appended domain extension. The problem is probably happening when you backup the profile from the old account onto the new one when you use Microcrap solution. That old "DNA" will be imported into the new account -- lockout. You have to be crazy to have Microcrap automate this... it can't copy 1,000 files over if it encounters 1 error and aborts. Plus when copying profiles with their method, it gives the illusion that the computer crashed.... looks bad to a customer who expects you to fail.
With winblows, you have to reboot after making system changes.
just copy: desktop, bookmarks, my documents, some hidden folders in the user's old profile for software. Manual remap those drive mappings and printers.
Do your corporate apps Phone home or looks into a shared folder for updates? That could happen without the user being aware. Could be your software inventory app needs to be adjusted as well.
Yeap...those are solid indepth answers bud.....Good luck with that
although I would never hire someone that has such contempt for the systems and the users they are being paid to support.
and if you are refering to me being a mod....I am not a mod here...
MLF
keep sucking!Quote:
Originally Posted by morganlefay
Okay, lets call it a day. Thanks for the answers from everyone, I will check it out and report back. Unfortunately I don't have access to AD to change users issues, the "senior" lady asks me to "google" this problem.
By you guys answering myself , I get more experience. Thanks.