User Accounts Locked Out!

User Accounts Locked Out!

am 02.04.2007 10:21:01 von Adotek

Hi All,

I have this morning put a new IIS 6 server live, since which I am
getting reports that user accounts are being locked out as soon as
they visit the site on the new server (Intranet). We are using
intergrated auth.

I havent fully investigated this yet, just wondering if anyone can
help with this urgent problem?

Thanks!

Re: User Accounts Locked Out!

am 03.04.2007 04:59:55 von Ken Schaefer

Firstly you need to enable auditing for unsuccessful logon attempts, and
then determine what/who/where is attempting to logon unsuccessfully.

Cheers
Ken


"Adotek" wrote in message
news:1175502061.775336.55190@y80g2000hsf.googlegroups.com...
> Hi All,
>
> I have this morning put a new IIS 6 server live, since which I am
> getting reports that user accounts are being locked out as soon as
> they visit the site on the new server (Intranet). We are using
> intergrated auth.
>
> I havent fully investigated this yet, just wondering if anyone can
> help with this urgent problem?
>
> Thanks!
>

Re: User Accounts Locked Out!

am 04.04.2007 03:46:30 von Roger Abell

Since the problem of accountX getting locked out does not
happen if accountX does not visit the new site, and does
happen when it does, I would look into what the pages in
the site are doing. IIS itself is not going to lockout an account
that has successfully authenticated to it, so what is the site
doing? Alternatively, are you meaning to say the attempt to
visit the new site, but fail to do so, and get their account
locked out in the process? (domain accounts? what is the
setting for the lockout threshold?)

Roger

"Adotek" wrote in message
news:1175502061.775336.55190@y80g2000hsf.googlegroups.com...
> Hi All,
>
> I have this morning put a new IIS 6 server live, since which I am
> getting reports that user accounts are being locked out as soon as
> they visit the site on the new server (Intranet). We are using
> intergrated auth.
>
> I havent fully investigated this yet, just wondering if anyone can
> help with this urgent problem?
>
> Thanks!
>

Re: User Accounts Locked Out!

am 14.06.2007 21:12:00 von Imran

I am also having same problem. I am using Windows Authetication, Domain
policy is set for three invalid logon attempt, but account get locked out at
first incorrect logon attemp.

"Roger Abell [MVP]" wrote:

> Since the problem of accountX getting locked out does not
> happen if accountX does not visit the new site, and does
> happen when it does, I would look into what the pages in
> the site are doing. IIS itself is not going to lockout an account
> that has successfully authenticated to it, so what is the site
> doing? Alternatively, are you meaning to say the attempt to
> visit the new site, but fail to do so, and get their account
> locked out in the process? (domain accounts? what is the
> setting for the lockout threshold?)
>
> Roger
>
> "Adotek" wrote in message
> news:1175502061.775336.55190@y80g2000hsf.googlegroups.com...
> > Hi All,
> >
> > I have this morning put a new IIS 6 server live, since which I am
> > getting reports that user accounts are being locked out as soon as
> > they visit the site on the new server (Intranet). We are using
> > intergrated auth.
> >
> > I havent fully investigated this yet, just wondering if anyone can
> > help with this urgent problem?
> >
> > Thanks!
> >
>
>
>

Re: User Accounts Locked Out!

am 15.06.2007 14:27:02 von Imran

"Imran" wrote:

> I am also having same problem. I am using Windows Authetication, Domain
> policy is set for three invalid logon attempt, but account get locked out at
> first incorrect logon attemp.
>
> "Roger Abell [MVP]" wrote:
>
> > Since the problem of accountX getting locked out does not
> > happen if accountX does not visit the new site, and does
> > happen when it does, I would look into what the pages in
> > the site are doing. IIS itself is not going to lockout an account
> > that has successfully authenticated to it, so what is the site
> > doing? Alternatively, are you meaning to say the attempt to
> > visit the new site, but fail to do so, and get their account
> > locked out in the process? (domain accounts? what is the
> > setting for the lockout threshold?)
> >
> > Roger
> >
> > "Adotek" wrote in message
> > news:1175502061.775336.55190@y80g2000hsf.googlegroups.com...
> > > Hi All,
> > >
> > > I have this morning put a new IIS 6 server live, since which I am
> > > getting reports that user accounts are being locked out as soon as
> > > they visit the site on the new server (Intranet). We are using
> > > intergrated auth.
> > >
> > > I havent fully investigated this yet, just wondering if anyone can
> > > help with this urgent problem?
> > >
> > > Thanks!
> > >
> >
> > This problem is resolved for us. It happend to be a seeting in IE. Uncheck Enable Integrated Windows Authentication in Advanced Tab under Internet Options.
> >