Frequent Account Lockouts after changing account expiration

Giganews Newsgroups
Subject: Frequent Account Lockouts after changing account expiration
Posted by:  CK (…@discussions.microsoft.com)
Date: Mon, 4 Aug 2008

We recently changed the account expiration date from 120 to 90 days. Since
then, user who's accounts have expired, sometimes get the message that their
account has expired when they boot their computer and they need to reset
their password but often they do not. To make matters worse, there are quite
a few people who are having issues with accounts continuously being locked
out after this change. One of them is on our IT staff. We have a distributed
environment with a mix of DC's that are 2k and 2k3 with some R2 mixed in
there. Any ideas what the problem could be? I'm checking the event logs at
these sites to see if they shed any light on the problem. I'll also run a
dcdiag to make sure everything is healthy and I will let you know if there is
anything unusual.

Replies