Stopping an account from locking out.

[maddave]

I am haveing trouble with our virus software. Basiclly the software creates a user account which is then used to access the repository server to get updates for user workstations. This account keeps locking out which is stopping the updates from taking place on a number of computers. I beleive that a wrong password has been implemented when one of the workstations was set up and when this pc trys to connect to the server three times with the wrong password it locks it out.

How can I set the user account used by the virus software to not lock out, if a wrong password is used three times, much like the admin account?

 

[markdmac]

You can not. Your best bet is to figure out where the account is being locked out from. I wrote a script to determine that a while back. You need to provide the script with a list of all computer names and DCs to query for the lockout. Give that file a name of WSLIST.TXT. Put one machine name per line. You will find a script I wrote to auto-generate that file in my FAQ faq329-4871. Here is the lockout script:

'==========================================================================
'
' NAME: getLockoutLocation.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.thespidersparlor.com[/URL]
' DATE  : 1/4/2004
'
' COMMENT: <comment>
'
'    THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
'    ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
'    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
'    PARTICULAR PURPOSE.
'
'    IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS 
'    BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
'    DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
'    WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
'    ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
'    OF THIS CODE OR INFORMATION.
'==========================================================================

On Error Resume Next

'open the file system object
Set oFSO = CreateObject("Scripting.FileSystemObject")

'open the data file
Set oTextStream = oFSO.OpenTextFile("wslist.txt")
'make an array from the data file
RemotePC = Split(oTextStream.ReadAll, vbNewLine)
'close the data file
oTextStream.Close
report = vbNothing

For Each strComputer In RemotePC
	Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
	Set colItems = objWMIService.ExecQuery("Select * from Win32_UserAccount",,48)
	For Each objItem in colItems
	    If objItem.Lockout = "False" Then
	        report = report & "User: " & objItem.FullName & " is locked out on " & strComputer & vbCrLf
	    End If
	Next
Next


Set ts = oFSO.CreateTextFile ("LockoutLocation.txt", ForWriting)
ts.write report
Set oTextStream = nothing
set ts = nothing
set oFSO = nothing

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript