RAS users passwords keep going invalid

We have several outworkers who have laptops, and who can connect to
our network in the usual way when they come into the office, and they
can do so without any difficulty. However, if they try and use RAS to
dial into the server, their passwords become invalid,and they can't
log on. Once their passwords have been reset on the server, they can
RAS in again. Their accounts are set up as 'passwords never expire'.

Does anybody know why their passwords keep getting invalidated, and
how to stop it?

Thanks

Steve
Wed Jul 09 11:12:07 CDT 2003

wibble@wobble.com wrote:

> We have several outworkers who have laptops, and who can connect to
> our network in the usual way when they come into the office, and they
> can do so without any difficulty. However, if they try and use RAS to
> dial into the server, their passwords become invalid,and they can't
> log on. Once their passwords have been reset on the server, they can
> RAS in again. Their accounts are set up as 'passwords never expire'.
>
> Does anybody know why their passwords keep getting invalidated, and
> how to stop it?
>
> Thanks

Sounds like the accounts are being locked out, because of failed login
attempts. It's a security measure designed to protect against hackers -
too many attempts at logging in with a specific account within a
certain amount of time will cause the account to be locked out. The
locked out status can be cleared from AD Users & Computers.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

wibble
Thu Jul 10 03:23:05 CDT 2003

Thanks for your post; I wish it were that simple! I'm sure they do get
finger trouble on their passwords from time to time, but this problem
is happenning much too frequently for this to be the full explanation,
and anyway it doesn't happen when they use their laptops to attach to
the office lan. I'm sure it probably is a simple issue we keep
overlooking, possibly in the RAS setup, but I don't think this is the
one.


On Wed, 09 Jul 2003 09:12:07 -0700, "Steve Foster [SBS MVP]"
<steve.foster@picamar.co.uk> wrote:

>wibble@wobble.com wrote:
>
>> We have several outworkers who have laptops, and who can connect to
>> our network in the usual way when they come into the office, and they
>> can do so without any difficulty. However, if they try and use RAS to
>> dial into the server, their passwords become invalid,and they can't
>> log on. Once their passwords have been reset on the server, they can
>> RAS in again. Their accounts are set up as 'passwords never expire'.
>>
>> Does anybody know why their passwords keep getting invalidated, and
>> how to stop it?
>>
>> Thanks
>
>Sounds like the accounts are being locked out, because of failed login
>attempts. It's a security measure designed to protect against hackers -
>too many attempts at logging in with a specific account within a
>certain amount of time will cause the account to be locked out. The
>locked out status can be cleared from AD Users & Computers.

dabutleronline
Thu Jul 10 12:17:26 CDT 2003

Hi,

Thank you for using Microsoft Technical Support Newsgroups.

Can you provide some additional detail on the problem you're seeing? What
is the error message the users are presented with when they attempt to
logon? Are there any related events in the server's event viewer? How
about the client's event viewer (if NT, 2K or XP)? Have you enabled PPP
logging?

Once again, thank you for using the newsgroups.

Best Regards,



David Butler - MCSE NT4/2000
Microsoft Technical Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties,
and confers no rights.

wibble
Fri Jul 11 03:42:37 CDT 2003

Hi David

I'll need to get back to you on this, it'll take a few days to track
down and get exact information out of the users.

Thanks

On Thu, 10 Jul 2003 17:17:26 GMT, dabutleronline@microsoft.com (David
Butler [MS]) wrote:

>Hi,
>
>Thank you for using Microsoft Technical Support Newsgroups.
>
>Can you provide some additional detail on the problem you're seeing? What
>is the error message the users are presented with when they attempt to
>logon? Are there any related events in the server's event viewer? How
>about the client's event viewer (if NT, 2K or XP)? Have you enabled PPP
>logging?
>
>Once again, thank you for using the newsgroups.
>
>Best Regards,
>
>
>
>David Butler - MCSE NT4/2000
>Microsoft Technical Support
>
>Get Secure! - www.microsoft.com/security
>
>=====================================================
>When responding to posts, please "Reply to Group" via
>your newsreader so that others may learn and benefit
>from your issue.
>=====================================================
>This posting is provided "AS IS" with no warranties,
>and confers no rights.
>