Hi, I am having issues with 1 outlook account using rpc over https in exchange 2007. The account seems to lock out caused by outlook anywhere. Does anyone have any good troubleshooting steps to easily see the issue causing this? Also, the account does pop-up with a cert error as this is only an smtp domain. I have tested with other accounts that do not have the issue, even with the cert pop-up, but at a loss what is causing the lockout. I did enable the basic auditing in AD, and shows bad password or user name. It is showing the domain that the computer is using when it fails vs the company AD domain when it fails. Is there any good debugging tools that can be used to better figure this out? Thanks,

On Tue, 17 Aug 2010 02:22:45 +0000, jag20191 wrote: >I am having issues with 1 outlook account using rpc over https in exchange 2007. The account seems to lock out caused by outlook anywhere. Does anyone have any good troubleshooting steps to easily see the issue causing this? Also, the account does pop-up with a cert error as this is only an smtp domain. I have tested with other accounts that do not have the issue, even with the cert pop-up, but at a loss what is causing the lockout. I did enable the basic auditing in AD, and shows bad password or user name. It is showing the domain that the computer is using when it fails vs the company AD domain when it fails. Is there any good debugging tools that can be used to better figure this out? If the domain doesn't match I don't think the account would get locked out -- because the domain doesn't exist the account should never match something in another domain. Are you sure it's Outlook that the cause of the problem and not something like a mobile device using ActiveSync? I've seen this happen when someone "forgets" they used a mobile device. The way the lockout mechanism works is that the previous two passwords aren't counted against the lockout count. But when the user changes the password a third time, and the mobile device tries to use the password frm three changes ago, it counts against the lockout count and the user is locked out. This is bad enough with MS Windows Mobile, but with something like an iPhone that just keeps hammering away with the same old password it get annoying really fast. The only way to "fix" the problem is to either hard-reset (or wipe) the mobile device or remove the ActiveSync partnership from the device (or change the password, of course). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

They are using active sync, but the phone seems to work until Outlook opens and prompts for credentials and locks out the account. Is there a way to store credentials in the registry for outlook?

On Tue, 17 Aug 2010 11:58:41 +0000, jag20191 wrote: >They are using active sync, but the phone seems to work until Outlook opens and prompts for credentials and locks out the account. Is there a way to store credentials in the registry for outlook? I'd try a new profile first. Then try nuking the protected system provider subkey: http://support.microsoft.com/kb/290684 http://www.pchell.com/support/oepassword.shtml --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP