6.10.1 ProblemA user is having account lockout problems and you need to determine where it is getting locked from and how it is getting locked out. 6.10.2 Solution6.10.2.1 Using a graphical user interfaceLockoutStatus is a new tool available for Windows 2000 or Windows Server 2003 that can help identify which domain controllers users are getting locked out. It works by querying the lockout status of a user against all domain controllers in the user's domain. To determine the lockout status of a user
At this point, each domain controller in the domain will be queried and the results will be displayed. 6.10.3 DiscussionThe Lockoutstatus.exe tool is just one of many that are available in the new "Account Lockout and Management" tool set provided by Microsoft. These new lockout tools are intended to help administrators with account lockout problems that are very difficult to troubleshoot given the tools available under Windows 2000. Along with the tool mentioned in the Solution Section, here are a few others that are included in the set:
All of the new Account Lockout tools can be downloaded from:
6.10.4 See AlsoMS KB 813500 (Support WebCast: Microsoft Windows 2000 Server and Windows Server 2003: Password and Account Lockout Features) |