Thursday, November 7, 2013

Active Directory - Persistently Locking an Account

A user on our domain had his network password saved in a service that constantly authenticates through the PDC.

The user changed his password.
His account was continually locked, no matter how many times unlocked, it would return to being locked.

This was resolved by removing his credentials from the service described in the beginning of this post.

TIP:
A network password should never be saved into a service that will not automatically update the password credentials upon changing through AD or the Windows password prompt/service.

No comments:

Post a Comment