User Account Locked Out!!

I am having a small problem with the one of the user accounts.
This particular user log on to two different PC's one running on XP and the
other running on 2000.

The problem strats occuring whenever you have to change the password after
42 days(default).Once he changed the password in one m/c, he has been locked
out to log on to the other m/c(2000).

Is the account logged into more than one machine or is it running a service
on the same machine? A user could have mapped drives to a resource from one
machine, on a different machine he changes his password and then the first
machine attempts to stay mapped to a drive and the password is no longer
correct and eventually locks the user out. Or after a password is changed a
service is running that attempts to authenticate with an old password.

To help try and track down where the account is getting locked out use
eventcombMT.exe from the Account Lockout tools found out Microsoft's
website. Use the built in search AccountLockouts and search in the created
text files for the user in question.

http://www.microsoft.com/downloads/d...displaylang=en

You have to find the process running as that user. It could be a drive
mapping or a scheduled task,

The account is running on two different m/c's(one is a XP and the other 2000).
Let me run the tool(eventcombMT.exe).
I am assuming the lock out is caused by nework mapped drive.
Once I ran this tool how can I solve this issue cause this user has to run
his profile
on these 2 m/c's ?

I don't understand can you elaborate please.
This particular user is a user in many security groups and have many shared
network drives he can access.

I ran the account lockout tool in one of the m/c(i.e;2000) it comes up with
no account has been locked out as a result.But still he cannot log on to the
windows 2000 m/c while he logged on to the XP M/C.

Just make sure any services or accounts have the password changed

Yes I have reset the password for the particular user account couple of days
ago using ADUC,since then he can log on to either XP or 2000,whichever he
logs on first.

But there is something else using that account which is locking him/her out.

(OP) Check for ODBC configured connections. Unusual to have Administrator,
but it wouldn't surprise me

This particular user has the local admin privilege,so I don't think any
database connectivity causing the same problem.

As I said instead of logging on to the XP if you first log on to the windows
2000 it will be fine but it will lock the user locking from logging on to the
XP m/c(also the same for other way around).
It's kind of strange problem!!!
I am really getting no idea ?

use NETLOGON debug logging

Enabling debug logging for the Net Logon service
HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Pa rameters\DBFlag
DBFlag = 0x2080FFFF (in: %windir%\debug\netlogon.log)

google for NETLOGON debug logging and you will find more info

Thanks for the solution.let me run the netlogon.log first and see what
happens!!

[Stevemorris]

Hi Mil,
Sorry to hear about the struggles that you, and anyone else experiencing similar account lockout problems have endured. While I don’t have the information necessary to give you a definitive explanation as to why you were, and may still be experiencing account lockouts, I can assure you that the NetWrix Account Lockout Examiner is capable of providing you with an answer, as well as a solution, that will allow you to quickly log back into your account and avoid similar issues in the future.
The NetWrix Account Lockout Examiner is useful and cost-effective in that it enables users to return to productivity as quickly as possible with minimal or no intervention from the help desk. After providing IT administrators with a real-time notification of the account lockout, the Account Lockout Examiner troubleshoots the issue on its own, investigating potential causes of the account lockout, such as mapped network drives or disconnected remote desktops, and then allows users to proactively resolve the issue through a web-based or E-mail console that is used to unlock the given account.
Check out the NetWrix Account Lockout Examiner at and download the evaluation version.