Hi to all, Scenario: Two different AD Forest (no trust), two different SCCM 2007 SP2 R3 Primary Site. I attached the Sites (set parent) after set a Standard Sender Addresses on every Primary Site. I configured the Address with a service account user, one on every AD forest, and put the service account user on respective SMS_SiteToSiteConnection_<site code> . After attached, I checked the sender.log, and the Site transfer files with no problem. The all hierarchy works with no problem. But ... sometimes (I really mean sometimes, every 8 / 12 hours, not always) the service account user is locked out. The service account user is used only for site to site communication. I made an investigation on AD Security Logs, and I discover the account is locked out from the Site Server Machine Account <servername>$ (??). Do you have any idea why the account is locked out? Any help will be higly appreciate, thanks in advance.

You could examine the AD Security logs to figure out who causes the lock. But try to delete the Site address link and recreate it With entering the service account information.Nicolai

Hi to all, the only way to solve the problem was to set a different accout name for Standard Sender Address. With the same account name SCCM Site Server lock the account. Just to be clear, Case Number 1, ACCOUNT LOCKED: Site Primary 1 (Domain 1) --> Standard Sender Address to Site Primary 2 --> set account <domain 2>\SMS_Addr_Account Site Primary 2 (Domain 2) --> Standard Sender Address to Site Primary 1 --> set account <domain 1>\SMS_Addr_Account Case Number 2, ACCOUNT NO LOCKED: Site Primary 1 (Domain 1) --> Standard Sender Address to Site Primary 2 --> set account <domain 2>\SMS_Addr_Account_2 Site Primary 2 (Domain 2) --> Standard Sender Address to Site Primary 1 --> set account <domain 1>\SMS_Addr_Account_1

No, I have no idea either! Can u please make sure I am never locked-out of my own computer again? Thank you, Susan Moore