Helmuth
(Fresh Scripter)
2002-08-28 09:33 PM
WIN9x Account LockOut after implementing kixtart

Hi,

We recently implemented kixtart ver 4.10, DC's are WIN2K with mix clients: WIN9x, WIN2K Pro, WinME, WINXP, with KIX RPC Service. Since our change we are experiencing a problem where the users are getting lock out, even though they already had log-in and use shares on the network. One minute the users are accessing data in the share, and if they go back to it, they are denied access. Once they reboot/logoff, they are denied access due to account lock. We had implemented account lock after an spefied amount of tryies afew months ago with success. Any Ideas? Thanks


Sealeopard
(KiX Master)
2002-08-28 10:26 PM
Re: WIN9x Account LockOut after implementing kixtart

Is that by any chance limited to Windows 9x clients or do all clients experience the lockout problem?

MightyR1
(MM club member)
2002-08-28 10:55 PM
Re: WIN9x Account LockOut after implementing kixtart

Did some searching on the BB and MickeSofts technet. It seems mostly win98 have these problems.

Here some Q numbers which might help you:
Q271496
q317796
q278558
q287639


Helmuth
(Fresh Scripter)
2002-08-29 03:38 PM
Re: WIN9x Account LockOut after implementing kixtart

Hi,

Thanks for the MS Q's, the account lock-out only happens to WIN9x systems, even if they log in through the VPN without a script running. I will look into the information from the Q's.


Sealeopard
(KiX Master)
2002-08-29 03:40 PM
Re: WIN9x Account LockOut after implementing kixtart

I think the only cure for this will be to upgrade to Windows 2000/XP, now that Windows 98 support is being phased out. Which is actually a good reason to force upgraded:
quote:
Sorry, Windows 9x is no longer supported by the manufacturer, therefore we are unable to provide support either.


Howard Bullock
(KiX Supporter)
2002-08-29 03:49 PM
Re: WIN9x Account LockOut after implementing kixtart

Do you have password caching enabled on the Win9x computers? We have found that this "feature" was responsible for many lockouts because the "old" cached password is offered resulting in a locked account. Disable password caching on Win9x computers.

Also Win9x lockouts can be caused by having an account defined in more than one domain. This becomes more evident in a master domain model where the same account name exists in the master domain and in the resource domain.

  • The client logs on from the master domain.
  • The client accesses a file share in the resource domain.
  • The server validates the account credentials from the master domain.
  • if the server find the account "user1" exists in the resource domain SAM, it uses the password hash there.
  • If the passwords from the master domain and resource domain are in sync, the account is locked out.


[ 04. September 2002, 23:14: Message edited by: Howard Bullock ]


Jack Lothian
(MM club member)
2002-08-30 06:13 AM
Re: WIN9x Account LockOut after implementing kixtart

We have been running Win98 clients with NT server & kixtart 3.63 for 3 years & we don't usually get lock outs except when students forget their passwords.

Yet, I have been seeing this problem a lot lately on this board. Is this a Win2000 issue, Kixtart 4 issue or just luck?


MightyR1
(MM club member)
2002-08-30 08:37 AM
Re: WIN9x Account LockOut after implementing kixtart

Jack,

I think it's a combination of W9x clients and W2k Servers. If you take a look at the Qs mentioned above I'll think you'll agree with me. [Wink]


Helmuth
(Fresh Scripter)
2002-08-30 09:28 PM
Re: WIN9x Account LockOut after implementing kixtart

Thanks for your info, I also found an article regarding about disabling password caching on computers that we know are experiencing the issue, and see if the issue repeats for them.

Helmuth
(Fresh Scripter)
2002-09-05 05:14 PM
Re: WIN9x Account LockOut after implementing kixtart

as un update, we apply a HotFix supply by Microsoft to computers running win98 that suffer the problem of locking out their account while they were using network resources. Thanks

Sealeopard
(KiX Master)
2002-09-05 05:16 PM
Re: WIN9x Account LockOut after implementing kixtart

Can you provide more info on this hotfix or link to the appropriate KB article?

Helmuth
(Fresh Scripter)
2002-09-09 11:45 PM
Re: WIN9x Account LockOut after implementing kixtart

Hey,
Here is the link to Microsoft Q293793
You can also find more info at Microsoft Q2758558
:Helmuth:


boshkov
(Fresh Scripter)
2002-09-16 10:17 PM
Re: WIN9x Account LockOut after implementing kixtart

Did you ever get this problem resolved. I am experiencing the same problem. It is not all Windows 9x systems, just some of them.....I have been trying to figure out what is going on, but i am not having any luck...

b


Helmuth
(Fresh Scripter)
2002-09-16 11:39 PM
Re: WIN9x Account LockOut after implementing kixtart

Hey boshkov,

The problem comes from the client win98, it doesn't affect all systems, but believe it will. One at a time. You need to apply a patch supplied by microsoft Q293793, please review the q's and links posted above your message. The problem will not go away unless you apply the patches on the needed clients, and I think there is a patch needed for the DC, however, I can't quitly remember. In our organization we have had to apply several unlisted hotfixes from Microsoft to the servers, so I can't say yes or no if the servers got a hotfix apply regarding such matter. You will need to call Microsoft and explain what you are experiencing, since it is a hotfix they will give you your money back. As far as we are concern, we apply the patches to about 10 PC per day, it can only be applied to computers experiencing the problem. One more admin tasks added to our to do lists. Good Luck


boshkov
(Fresh Scripter)
2002-09-18 03:09 PM
Re: WIN9x Account LockOut after implementing kixtart

I also say a couple of people saying that password caching should be turned off on the Win9x systems. Is that something that should be done as well???

boshkov
(Fresh Scripter)
2002-09-18 03:28 PM
Re: WIN9x Account LockOut after implementing kixtart

So did applying the hotfix fix the problem though???

Helmuth
(Fresh Scripter)
2002-09-18 10:47 PM
Re: WIN9x Account LockOut after implementing kixtart

Hey,

IT is good to disable the cache password, but it will not help you. Once you applied the HotFix to the win98 client, it fixes the problem. HOwever, its only good to the client, then someonw else will have the same problem.


boshkov
(Fresh Scripter)
2002-09-20 02:47 PM
Re: WIN9x Account LockOut after implementing kixtart

I applied the hotfixes from both of these articles, Q293793 and Q2758558. Did you also install both hotfixes? It appears that they are not having the problem anymore. Thanks for all your help.