RE: Re: (OT) Win 2k Account lockout problem

["Paul Gordon" <paul_gordon@xxxxxxx>]

Hmm...

That sort of thing "shouldn't" happen....

In a network with multiple domain controllers, when a client fails to be
authenticated by one of them, it is supposed to go and try to authenticate
against the PDC (or the PDC Emulator FSMO role in an Active Directory
environment).

This mechanism is designed precisely to prevent this scenario... the logc
being that the PDC or PDC emulator should always have the most up-to-date
account database, since in an NT4 environment changes are only ever made at
the PDC, and then replicated out ot BDCs, and in an AD environment the PDC
Emulator is guaranteed a fast replication from other DC's in the domain...

Only when something is very broken should you expect logins to fail becuase
of out of date credentials at the authenticating DC....

anything's possible though I suppose....

Paul G.



>From: "Simon Randall" <srandall@xxxxxxx>
>Reply-To: ukha_d@xxxxxxx
>To: <ukha_d@xxxxxxx>
>Subject: RE: [ukha_d] Re: (OT)  Win 2k Account lockout problem
>Date: Tue, 23 Dec 2003 13:07:25 -0000
>
>This a long shot but have had it happen b4!
>
>Your network has 2 servers that can authenticate the logon request, 
but
>the 2 servers are not synchronizing together properly or there is a
time
>delay between them syncing.
>
>Now ive only seen this happen where a network has a win2k server that
>can authenticate and a NT servers that can authenitcate.
>
>Perhaps this is the case?
>
>-----Original Message-----
>From: Stuart Whyte [mailto:lists@xxxxxxx]
>Sent: 23 December 2003 12:56
>To: ukha_d@xxxxxxx
>Subject: [ukha_d] Re: (OT) Win 2k Account lockout problem
>
>Ok, I have checked the services and they are all set to logon as the
>local system account.
>
>I have also checked background apps and nothing comes up.
>
>and to top it all the user on the next desk to them says they
>somethimes have the same problem too!! AHHHHH!!!
>
>Thanks all for them help, think Im going to have to investgate
>further.
>
>Stuart
>
>--- In ukha_d@xxxxxxx, "Simon Randall" <srandall@q...>
wrote:
> > I would imagine it would be on their local PC, unless they are a
>system
> > administrator?  Then it could be on the server
> >
> > Its most likely to be something like a virus checker or something
> > similar?
>
>
>
>UKHA 2004: 15th and 16th May 2004
>
>http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>Yahoo! Groups Links
>
>To visit your group on the web, go to:
>  http://groups.yahoo.com/group/ukha_d/
>
>To unsubscribe from this group, send an email to:
>  ukha_d-unsubscribe@xxxxxxx
>
>Your use of Yahoo! Groups is subject to:
>  http://docs.yahoo.com/info/terms/
>
>
>
>UKHA 2004: 15th and 16th May 2004
>
>http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>
>Yahoo! Groups Links
>
>To visit your group on the web, go to:
>  http://groups.yahoo.com/group/ukha_d/
>
>To unsubscribe from this group, send an email to:
>  ukha_d-unsubscribe@xxxxxxx
>
>Your use of Yahoo! Groups is subject to:
>  http://docs.yahoo.com/info/terms/
>
>

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today!
http://www.msn.co.uk/messenger


UKHA 2004: 15th and 16th May 2004

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx