Accounts locked out after DC reboot
i got a problem which is drivin me crazy... hope somebody can help,
The domain is w2003 native, with 2 DCs on one single site, and about 150 users.
50 of them are connected locally, the rest is using vpn or authenticating only against the mail server.
There'a a GPO applied (i believe correctly) at domain level which sets password lenght and maximum age (60 days) for all the domain users.
The problem is when i reboot a DC many users cannot login anymore, and i have to reset the passwords to give them access again.
Odd thing is that doesn't happen any time i reboot the server (but it already happened twice), and that only part of the users are affcted (say 50 out of 150).
I couldnt find anything useful in the logs, and i cant see any common characteristics between the locked out users...
Thanks very much