RE: Windows 2000 user login

From: Andre Luis Braz Henrique <andrelbhenrique(at)ig.com.br>
Date: Fri Mar 28 2003 - 16:49:07 EST

Turn on auditing of failed user logon. Unlock user´s account. Check the DC´s security event viewer for event id 529:
529 Failure Audit Logon Failure Reason: Unknown user name or bad password

Look into description field for the machine that cause the account lockout

Be happy!

Andre Luis Braz Henrique
MCSE
iG - Tecnologia
+55 (11) 5501-6743
++++------ Tenha seu email do iG. E rapido e facil ------++++ http://cadastro.ig.com.br/  

-----Original Message-----

From: Wright, Bill [mailto:bwright@ny.whitecase.com] Sent: Thursday, March 27, 2003 2:36 PM
To: Nuzman
Cc: security-basics@securityfocus.com
Subject: RE: Windows 2000 user login

Can't do that because were 24-7. I was hoping there was some utility I could use to automate it. Any other options or ideas.

Thanks,
Bill

-----Original Message-----

From: Nuzman [mailto:nuzman@shreve.net]
Sent: Thursday, March 27, 2003 11:40 AM
To: Wright, Bill
Subject: Re: Windows 2000 user login

Try setting a policy that logs everyone out at 3am

• Original Message ----- From: "Wright, Bill" <bwright@ny.whitecase.com> To: <security-basics@securityfocus.com> Sent: Wednesday, March 26, 2003 12:16 PM Subject: Windows 2000 user login

I have never posted to this board, so hopefully I'm following the right procedures. My issue is that a user's account keeps getting locked out due to an aggressive password policy (30 days) and he claims that he isn't logged into multiple machines nor is he fat fingering his password. Is anybody aware of a product to find out where or how many Windows 2000 servers or workstations a user is logged into? My thinking is that he's logged into multiple machines under an old password that keeps locking him out.

Thanks,
Bill

---

SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1

---

SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1

---

SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1 Received on Sat Mar 29 09:53:06 2003