User Passwords Needing Reset Constantly

[bensong]

Hello

I have a MAN covering 3 seperate campuses, I am running Windows 2003 Domain with 5 AD servers 3 at one location and 1 each at 2 other locations. I am having a problem with users at 1 of the locations not being able to logon, the account does not appear to be locked. If I go in and reset/retype the password in, then they can logon.

Anyone have any clues as to where I can look for and answer.

Thanks in advance
Benson Greene
Network Admin
Excela Health

 

[swabs]

Do you have a global catalog server at the problem location?

 

[bensong]

Yes, all three locations have Global Catalog on AD Server

 

[swabs]

Can you give us any more information? Are you using sites? Has this been happening allways or just recently. If just recently has any of the network topology changed? Is there only a single domain in the forest or multiple domains in the forest?

 

[bensong]

Just started getting complaints from Technicians about it. They say it has been happening for several weeks.

Topology has not changed. Connectivity between sites is Dark Fiber all running at Gig Speed. I have been monitoring replication and that has been happening quite smoothly.

Single Domain, multiple OU's within the Domain.

I also need to gather some more information from the techs as well. I am just starting the process, perhaps hoping for an Immediate "Oh yeah, download this patch" kind of day.

SWABS if you have any Ideas pop in your head let me know. I am going to try to get more info from the techs.

 

[bensong]

Update Information
Techs say that it has been happening off and on for over a month.

No connection with users or a specific area of the building.

Seems to be a lot of users who are authenticating via a webpage access, not neccessarily outside the building though.

Answer to previous ??? Yes I am using Sites.

 

[swabs]

If they are authenticating via webpage access are they using wireless connectivity?

Could they possibily be using cached passwords to get on the machines but have expired passwords that are rejected when authenticating via web?

How does the web authentication work?

 

[bensong]

Some are using wireless but not all.

The user accounts are not marked as having expired passwords.

MS IIS on 2003 server. Using NT password Authentication.
When browser hits the page, it passes the logon information from the PC and then either prompts or doesnt depending on how it is logged on. If coming from outside the network, it prompts every time.