User getting "Account is Locked Out" for 2 days

Discussion in 'Windows Small Business Server' started by jaredea, Aug 4, 2006.

  1. jaredea

    jaredea Guest

    I have a user that just started coming to me with his account being
    locked out. While waiting for me to get to him yesterday it must have
    passed the grace period and allowed him to log in, but today he has
    the same problem...he goes to log in and gets a message about his
    account being locked...then he waits and if he can log in he can't do
    anything on the network.

    I brought his computer to my office and have been trying to figure out
    what is going on...i have gone into his account and unchecked the
    "account is locked out" box and then logged in as him. It will go
    thorugh the synchronizing and open a few things, but a message will
    pop-up saying it "could not reconnect all network drives" and if i
    try to go to a shared drive I get a message asking for a password and
    then it will say:

    "Logon Unsucessful - The username you typed is the same as the
    username you logged in with. That user name has already been tried. A
    domain controller cannot be found to verify that user name."

    Then i'll look at his account properties at that point and the
    "Account is locked out" is checked again.

    I am not typing his password incorrectly when logging in. I've tried
    changing the password to see if this helps. Please advise...

    jared
     
    jaredea, Aug 4, 2006
    #1
    1. Advertisements

  2. jaredea

    Gregg Hill Guest

    Jared,

    When you say that you "brought his computer to my office" are you saying
    that you took it off of his network and placed it onto yours? If true, then
    of course you are getting errors. The system is no longer attached to the
    network that locked the account and has the shared folders on it.

    Put it back onto the network from which it came, use the server to unlock
    the account, then change his password.

    Gregg Hill
     
    Gregg Hill, Aug 4, 2006
    #2
    1. Advertisements

  3. jaredea

    pete Guest

    Have you tried setting up a temporary account and logging into that account
    from his pc?

    Have you tried resetting his password on his account on the server?
    Just a couple of thoughts.
     
    pete, Aug 4, 2006
    #3
  4. The first thing I would do for this is, while logged in to the user's
    account on the client PC, go to Control Panel -> Users. Go to the Advanced
    tab and clear out the saved passwords. (Or just clear ones that seem to
    apply to the local domain).

    Failing that, have the user log in from a different workstation and see what
    happens. If the account does not lock out as it is on his current PC, start
    connecting to the resources he usually uses, one at a time, until you can
    hopefully narrow it down to a specific cause.
     
    Dave Nickason [SBS MVP], Aug 4, 2006
    #4
  5. jaredea

    jaredea Guest

    thanks for your reply greg - i didn't need to actually put that
    information into the post, or at least i should have given more
    description -- same network -- i just moved it (laptop) to my office
    because i wanted to rule out any faulty connection issues...

    jared
     
    jaredea, Aug 5, 2006
    #5
  6. jaredea

    jaredea Guest

    ah, good call...i did log in a Admin on his computer and got all the
    resources, but didn't log into another computer using his
    account...i'll try that next time it happens...

    Also, clearing out the passwords is a good call as well...

    jared
     
    jaredea, Aug 5, 2006
    #6
  7. jaredea

    jaredea Guest

    hey pete, thanks for the reply...

    i didn't try that, but i did log into his PC using the Admin account
    and didn't have an issue...i also reset his password on the server and
    that didn't work either...

    jared
     
    jaredea, Aug 5, 2006
    #7
  8. jaredea

    Gregg Hill Guest

    Jared,

    It made it sound as though you were a consultant who took the computer to
    your own offsite office. I had hoped you weren't doing that!

    Gregg Hill
     
    Gregg Hill, Aug 5, 2006
    #8
  9. In
    Disable account lockout - it's bad news.
     
    Lanwench [MVP - Exchange], Aug 5, 2006
    #9
  10. Are you using roaming profiles? I have seen a user's profile get corrupted
    and have it cause very strange thnigs to happen.

    To fix it, Make sure the user is logged off everywhere. I find another
    system on the network where the user has logged onto recently. Then pull the
    network cable from that system to disconnect it from the network. Log on and
    log off using cached credentials, making this local profile newer than the
    one on the server. Then reconnect the workstation to the network and log on
    / off again. This will copy the good profile to the server. I delete the
    user's corrupt profile from the original system before letting them log back
    on.

    I have also seen this problem back in the NT days where there was a registry
    tweek that was needed to fix the problem. (NT domain with win2000
    workstations) The solution was found on the MS Knowlege base. I cannot
    remember now what it was.

    Also, make sure the workstation's DNS settings are pointing to the SBS
    server.

    Buddy G.

    "Lanwench [MVP - Exchange]"
     
    Buddy Greenshield, Aug 6, 2006
    #10
  11. In
    You could also just do this:

    a) rename the server copy of the user's profile folder, and have the user
    log back into that specific workstation & log out again, to upload the local
    copy to the server
    or
    b) log into the workstation as the admin and delete the cached profile in
    the system applet in control panel, then have the user log in to download
    the server copy

    Depends which one is whacked.


     
    Lanwench [MVP - Exchange], Aug 6, 2006
    #11
  12. True, which one is whacked... usually it's both the local copy and the
    server copy. Most users are smart enough to try logoff/ logon or reboots
    before calling me.
    Thats why I look for another machine. Usually, I'm remoting in to
    troubleshoot, so I disable the switch port on the uneffected machine and
    have them logon / logoff. That's one of the reasons why I insist on managed
    switches for my customers.

    I could also pull a copy from backup, but hey, sometimes I just do what
    seems to me the easiest thing.

    Buddy G.

    "Lanwench [MVP - Exchange]"
     
    Buddy Greenshield, Aug 7, 2006
    #12
  13. In
    Agreed!
    Note that you can also use volume shadow copies - map a drive to your
    profiles share, and see what you find in the properties of the parent folder
    then. :)
     
    Lanwench [MVP - Exchange], Aug 7, 2006
    #13
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.