Network Account Unexpetedly locked

[realstandman]

For the Pas 2 weeks since I changed my password my network account has been getting unexpectedly locked. Something on my pc ( I assume ) is trying to log into our server sending the old password. I have checked all of the programs for a login and password where it might have asked on install but to no avail. How can I see or capture the requests as they leave my PC or where can I start to trouble shoot this, I do have a tool called lockoutstatus.exe that shows when the last bad password was sent to the server. This is all happening while I'm logged on and working...Any help with this would be greatly appreciated!!!!

Don't think and the solution will come.

 

[paulha]

Check out you antivirus logs and see if there is anything of interest in there

 

[realstandman]

I have and to no avail. The only thing picked up in the logs was simple cookies.

Don't think and the solution will come.

 

[bcastner]

Check Scheduled Tasks.
Check the Log In tab in all services.
Check any .bat or .cmd file that you may have created that uses RunAs.


____________________________
Users Helping Users

 

[realstandman]

There are no scheduled tasks. I checked the log in tab in all services none have a static login, and I havn't created any bat files or .cmd files. How can find what is doing this????.....Frustrated....

Don't think and the solution will come.

 

[chipk]

Check your dcomcnfg. Go to STart/Run, type dcomcnfg. Expand Component Services, Computers, My Computer, right-click on each object, go to properties, and check the "Identity" tab. You may have something in here that is attempted to start using your credentials with an old password.

That will take a while, and there may be a way to check this programmatically, but I'm not sure.

 

[u080570]

I had a very similar situation a while ago with one of my services accounts getting locked out all the time....

Im not sure if this will apply to you or not, but if you use DHCP, do you have the Dynamic Update credentials configured to use the ID that is getting locked out?

I doubt that's your issue, but I thought I'd throw it out there anyway......Good Luck!

 

[realstandman]

Ok done that. I found one that had a bogus domain name that started with IWAM. Well see...

Don't think and the solution will come.

 

[realstandman]

I Switched to dhcp I was static no dice...Anymore sugestions anyone?

Don't think and the solution will come.

 

[realstandman]

Still having this same problem. I'm thinking of formatting and putting a new image on the pc after trying for weeks to correct this. Any more Suggestions before I go balistic?

Stan

Don't think and the solution will come.

 

[bcastner]

You changed the password on the local console/workstation, but did not update the user credentials on the DC for your Domain.

Log out of all machines

WARNING! You must be logged into one (and only one) computer on the NIH/NIEHS network prior to attempting to change your password. If you do not, the other computer(s) will continue using your old password and lock your account.

Network Logon

If your computer is already on and you are the one who logged onto the network then proceed to Step 3. If you are not sure who is logged on then hit [CTRL][ALT][DEL] buttons, and you will see who is currently logged on.

Change Password

Press [Ctrl][Alt][Del] keys at the same time. This will bring up the Windows Security box.
Select the Change Password button. The Change Password window should display.
Enter information in each field. Use your <Tab> key to move to the next field.
User name: Your user ID should appear here if you are logged in, so just press <Tab>
Domain: If this says NIH, just press <Tab> (If not, type NIH)
Old password: Type your old password and press <Tab>
New password: Type a new password and press <Tab>
Confirm new password: Type your new password again, then click [OK]
WARNING: Your password is case sensitive, so be careful what you type!

You should see a confirmation message indicating that your password has been successfully changed. You will be informed if there is a problem and the system will tell you how to correct the problem (e.g. there is a mismatch between the new password you typed and the confirmation password you typed).

Reboot your computer

Do a normal shutdown and reboot. When the computer restarts, try your NEW password.





____________________________
Users Helping Users

 

[realstandman]

Ok, I think the dc and the local machine were in sink but I'll give it a wirl. Should know someting in about an hour as it normally happens every 1.45-2 hours.

stan

Don't think and the solution will come.

 

[realstandman]

Didn't work. Know telling whats the problem is.

stan

Don't think and the solution will come.

 

[realstandman]

Drilled it down. Its not my pc sending the lockouts its one of the network servers doing this. Any suggestions as to why a network server would lock out an account. We checked all of the services and none are under my login profile. Any suggestion would be cool...

Don't think and the solution will come.