#28003 - 2002-08-28 09:33 PM
WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Hi,
We recently implemented kixtart ver 4.10, DC's are WIN2K with mix clients: WIN9x, WIN2K Pro, WinME, WINXP, with KIX RPC Service. Since our change we are experiencing a problem where the users are getting lock out, even though they already had log-in and use shares on the network. One minute the users are accessing data in the share, and if they go back to it, they are denied access. Once they reboot/logoff, they are denied access due to account lock. We had implemented account lock after an spefied amount of tryies afew months ago with success. Any Ideas? Thanks
|
Top
|
|
|
|
#28006 - 2002-08-29 03:38 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Hi,
Thanks for the MS Q's, the account lock-out only happens to WIN9x systems, even if they log in through the VPN without a script running. I will look into the information from the Q's.
|
Top
|
|
|
|
#28008 - 2002-08-29 03:49 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
Do you have password caching enabled on the Win9x computers? We have found that this "feature" was responsible for many lockouts because the "old" cached password is offered resulting in a locked account. Disable password caching on Win9x computers.
Also Win9x lockouts can be caused by having an account defined in more than one domain. This becomes more evident in a master domain model where the same account name exists in the master domain and in the resource domain.
- The client logs on from the master domain.
- The client accesses a file share in the resource domain.
- The server validates the account credentials from the master domain.
- if the server find the account "user1" exists in the resource domain SAM, it uses the password hash there.
- If the passwords from the master domain and resource domain are in sync, the account is locked out.
[ 04. September 2002, 23:14: Message edited by: Howard Bullock ]
|
Top
|
|
|
|
#28011 - 2002-08-30 09:28 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Thanks for your info, I also found an article regarding about disabling password caching on computers that we know are experiencing the issue, and see if the issue repeats for them.
|
Top
|
|
|
|
#28012 - 2002-09-05 05:14 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
as un update, we apply a HotFix supply by Microsoft to computers running win98 that suffer the problem of locking out their account while they were using network resources. Thanks
|
Top
|
|
|
|
#28014 - 2002-09-09 11:45 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Hey, Here is the link to Microsoft Q293793 You can also find more info at Microsoft Q2758558 :Helmuth:
|
Top
|
|
|
|
#28015 - 2002-09-16 10:17 PM
Re: WIN9x Account LockOut after implementing kixtart
|
boshkov
Fresh Scripter
Registered: 2002-08-05
Posts: 14
Loc: Michigan
|
Did you ever get this problem resolved. I am experiencing the same problem. It is not all Windows 9x systems, just some of them.....I have been trying to figure out what is going on, but i am not having any luck...
b
|
Top
|
|
|
|
#28016 - 2002-09-16 11:39 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Hey boshkov,
The problem comes from the client win98, it doesn't affect all systems, but believe it will. One at a time. You need to apply a patch supplied by microsoft Q293793, please review the q's and links posted above your message. The problem will not go away unless you apply the patches on the needed clients, and I think there is a patch needed for the DC, however, I can't quitly remember. In our organization we have had to apply several unlisted hotfixes from Microsoft to the servers, so I can't say yes or no if the servers got a hotfix apply regarding such matter. You will need to call Microsoft and explain what you are experiencing, since it is a hotfix they will give you your money back. As far as we are concern, we apply the patches to about 10 PC per day, it can only be applied to computers experiencing the problem. One more admin tasks added to our to do lists. Good Luck
|
Top
|
|
|
|
#28017 - 2002-09-18 03:09 PM
Re: WIN9x Account LockOut after implementing kixtart
|
boshkov
Fresh Scripter
Registered: 2002-08-05
Posts: 14
Loc: Michigan
|
I also say a couple of people saying that password caching should be turned off on the Win9x systems. Is that something that should be done as well???
|
Top
|
|
|
|
#28018 - 2002-09-18 03:28 PM
Re: WIN9x Account LockOut after implementing kixtart
|
boshkov
Fresh Scripter
Registered: 2002-08-05
Posts: 14
Loc: Michigan
|
So did applying the hotfix fix the problem though???
|
Top
|
|
|
|
#28019 - 2002-09-18 10:47 PM
Re: WIN9x Account LockOut after implementing kixtart
|
Helmuth
Fresh Scripter
Registered: 2002-07-10
Posts: 10
|
Hey,
IT is good to disable the cache password, but it will not help you. Once you applied the HotFix to the win98 client, it fixes the problem. HOwever, its only good to the client, then someonw else will have the same problem.
|
Top
|
|
|
|
#28020 - 2002-09-20 02:47 PM
Re: WIN9x Account LockOut after implementing kixtart
|
boshkov
Fresh Scripter
Registered: 2002-08-05
Posts: 14
Loc: Michigan
|
I applied the hotfixes from both of these articles, Q293793 and Q2758558. Did you also install both hotfixes? It appears that they are not having the problem anymore. Thanks for all your help.
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
1 registered
(Allen)
and 382 anonymous users online.
|
|
|