RE: Re: (OT) Win 2k Account lockout problem

["Simon Randall" <srandall@xxxxxxx>]

The scenario ive had was win2k as the PDC and an email server that was
NT and also a bdc.

So you change the password on the client and this is changed at the PDC,
then you open outlook instantly from the NT4 server that still has the
old password.  The result was a lock out.



-----Original Message-----
From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
Sent: 23 December 2003 13:56
To: ukha_d@xxxxxxx
Subject: RE: [ukha_d] Re: (OT) Win 2k Account lockout problem

Hmm...

That sort of thing "shouldn't" happen....

In a network with multiple domain controllers, when a client fails to be

authenticated by one of them, it is supposed to go and try to
authenticate
against the PDC (or the PDC Emulator FSMO role in an Active Directory
environment).

This mechanism is designed precisely to prevent this scenario... the
logc
being that the PDC or PDC emulator should always have the most
up-to-date
account database, since in an NT4 environment changes are only ever made
at
the PDC, and then replicated out ot BDCs, and in an AD environment the
PDC
Emulator is guaranteed a fast replication from other DC's in the
domain...

Only when something is very broken should you expect logins to fail
becuase
of out of date credentials at the authenticating DC....

anything's possible though I suppose....

Paul G.



>From: "Simon Randall" <srandall@xxxxxxx>
>Reply-To: ukha_d@xxxxxxx
>To: <ukha_d@xxxxxxx>
>Subject: RE: [ukha_d] Re: (OT)  Win 2k Account lockout problem
>Date: Tue, 23 Dec 2003 13:07:25 -0000
>
>This a long shot but have had it happen b4!
>
>Your network has 2 servers that can authenticate the logon request,
but
>the 2 servers are not synchronizing together properly or there is a
time
>delay between them syncing.
>
>Now ive only seen this happen where a network has a win2k server that
>can authenticate and a NT servers that can authenitcate.
>
>Perhaps this is the case?
>
>-----Original Message-----
>From: Stuart Whyte [mailto:lists@xxxxxxx]
>Sent: 23 December 2003 12:56
>To: ukha_d@xxxxxxx
>Subject: [ukha_d] Re: (OT) Win 2k Account lockout problem
>
>Ok, I have checked the services and they are all set to logon as the
>local system account.
>
>I have also checked background apps and nothing comes up.
>
>and to top it all the user on the next desk to them says they
>somethimes have the same problem too!! AHHHHH!!!
>
>Thanks all for them help, think Im going to have to investgate
>further.
>
>Stuart
>
>--- In ukha_d@xxxxxxx, "Simon Randall" <srandall@q...>
wrote:
> > I would imagine it would be on their local PC, unless they are a
>system
> > administrator?  Then it could be on the server
> >
> > Its most likely to be something like a virus checker or something
> > similar?
>
>
>
>UKHA 2004: 15th and 16th May 2004
>
>http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>Yahoo! Groups Links
>
>To visit your group on the web, go to:
>  http://groups.yahoo.com/group/ukha_d/
>
>To unsubscribe from this group, send an email to:
>  ukha_d-unsubscribe@xxxxxxx
>
>Your use of Yahoo! Groups is subject to:
>  http://docs.yahoo.com/info/terms/
>
>
>
>UKHA 2004: 15th and 16th May 2004
>
>http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>
>Yahoo! Groups Links
>
>To visit your group on the web, go to:
>  http://groups.yahoo.com/group/ukha_d/
>
>To unsubscribe from this group, send an email to:
>  ukha_d-unsubscribe@xxxxxxx
>
>Your use of Yahoo! Groups is subject to:
>  http://docs.yahoo.com/info/terms/
>
>

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today!
http://www.msn.co.uk/messenger


UKHA 2004: 15th and 16th May 2004

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx