Net-Eng Posted January 10, 2013 Posted January 10, 2013 Good Afternoon, I am after a way (scheduled script?) to auto unlock users accounts. We are getting numerous students coming to us saying they can't log in, and all that's the problem is their account needs unlocking. They seem to get locked out when they switch between machines. Is there a script or any way of automating the searching for and unlocking of these locked accounts? Regards, Net-Eng
FN-GM Posted January 10, 2013 Posted January 10, 2013 There is a group policy to automatically unlock the accounts after x amount of time?
AngryTechnician Posted January 10, 2013 Posted January 10, 2013 Yep, check under Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Account Lockout Policy. I believe you need to change this on the GPO that applies to your domain controllers. Is there any pattern to the affected users? The only time we've had this, it was due to students intentionally locking out each others' accounts by entering the wrong password repeatedly.
Net-Eng Posted January 10, 2013 Author Posted January 10, 2013 Thanks to both responses. I have updated the GP and will see how it goes. The client machines are Mac's and we believe it is happening when they switch between machines, but there is no pattern to this. Sometimes it happens, sometimes it doesn't.
Net-Eng Posted January 18, 2013 Author Posted January 18, 2013 After a week of having this policy in place, we are still getting users who are locked out and remaining locked out until we unlock them in AD. The GP settings we have are:Account lockout duration: 1 minute Account lockout threshold: 30 invalid logon attempts Reset account lockout counter after: 1 minute Is there anything else I can set, or does anyone have previous experience of this problem and an alternative solution to it? Net-Eng
Tsonga Posted January 18, 2013 Posted January 18, 2013 Are they switching from Mac to Mac? Or mac to PC?
Net-Eng Posted January 18, 2013 Author Posted January 18, 2013 They are switching Mac to Mac - sometimes iMac to iMac, sometimes iMac to MacBook and vice versa.
Tsonga Posted January 18, 2013 Posted January 18, 2013 IS their keychain being mapped to a network drive?
Net-Eng Posted January 18, 2013 Author Posted January 18, 2013 (edited) No not as far as I'm aware. Edited January 18, 2013 by Net-Eng
Lftek55 Posted February 7, 2013 Posted February 7, 2013 Have they got a phone with the wrong password set on it? It might be trying to connect to the system.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now