Network log on issues

19 Oct 2008 1:53 AM

zmoustache

Hi...
Hoping you can help with this problem

User gets pop up saying windows passwords will expire in 14 day (something
like that)
We have nothing set up like this for the passwords...just to reset once a
year.

User will reset password and then after logging on again can not log in with
that password. User is also locked out after 1 attempt?

However, if user changes password to same one as before, then there is no
problem

At first it was just 1 user...now it seems to be affecting all users.

If the user changes password and gets messed up, then it's a pain to get
them back to the way they were before...I delete various workgroups from the
profile and then add them again and this seems to take care of it.

I have scanned the server for rootkits and viruses, nothing was found.

I am confused as to why this may be happening...

Any suggestions would be appreciated.

Thanks

Wes

--
Don''t take life so seriously...
You''ll never get out alive.

20 Oct 2008 3:22 AM

Salvador Manaois III

Check the GPOs applied to your users. Specifically, verify if you have
password aging and password history configured.

You mentioned it started with one user and this issue has somewhat spread to
others. Sounds like a malware spreading to me. Check for any "unusual"
auto-starting entries (via msconfig or Syinternals' autoruns) and
delete/disable those you find.

--
Salvador Manaois III
MCSE MCSA CEH MCITP | Enterprise/Server Admin
Bytes & Badz : http://badzmanaois.blogspot.com

Show quoteHide quote

"zmoustache" wrote:

> Hi...
> Hoping you can help with this problem
>
> User gets pop up saying windows passwords will expire in 14 day (something
> like that)
> We have nothing set up like this for the passwords...just to reset once a
> year.
>
> User will reset password and then after logging on again can not log in with
> that password. User is also locked out after 1 attempt?
>
> However, if user changes password to same one as before, then there is no
> problem
>
> At first it was just 1 user...now it seems to be affecting all users.
>
> If the user changes password and gets messed up, then it's a pain to get
> them back to the way they were before...I delete various workgroups from the
> profile and then add them again and this seems to take care of it.
>
> I have scanned the server for rootkits and viruses, nothing was found.
>
> I am confused as to why this may be happening...
>
> Any suggestions would be appreciated.
>
> Thanks
>
> Wes
>
>
>
> --
> Don''t take life so seriously...
> You''ll never get out alive.