Hi,

I have a remote user that seems unable to map the company network drives when connected via VPN.

Everytime the batch script runs or if I try to manually map the network drives with the 'net use' command.

Instead of being offered to enter a username and password, it just instantly errors with a 1909 and claims the account is currently locked.

I have checked the PDC and the account isn't locked.

I have checked 'Control userpasswords2' and cannot find any conflicting accounts.

So what credentials is Vista trying to use?

Where has it got these credentials from?

What is claiming the account is locked as it doesn't seem to be the DC?

How do I resolve this?

We have 3 other Vista users and we don't get this problem.

Thanks,
1DMF
 

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

MIME::Lite TLS Email Encryption - Perl v0.02 beta

unfortunately, there may not be a simple solution to that problem...

as it seems that it is an authentication error, which could be temporary, disappear and reoccur within minutes...

when you attempted the "NET USE" command, did you also specify the user name with the "/user:" switch? if not try it also, though from what I read it probably also bomb out on you...

you could also try to set the Kerberos Authentication level down to "Send LM & NTLM - use NTLMv2 session security if negotiated" on both the client and the server...

Adjusting the authentication level on Vista and XP
http://publib.boulder.ibm.com/infocenter/zos/v1r12/topic/com.ibm.zos.r12.ioea600/aulm.htm

Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
http://support.microsoft.com/kb/823659
(scroll down to item 10.)

System error 1909 has occurred. The referenced account is currently locked out and may not be logged on to.
http://zotline.com/shownote.zot/NoteNum/4435.html

another alternative would be to migrate said user to another profile, and test from there...
 

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

OK, I've tried your first suggestion, and will get the user to try it tonight.

I cannot test via the VPN while inside the network

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

MIME::Lite TLS Email Encryption - Perl v0.02 beta