I have a two pc's on our domain, one with Windows Xp, on with Windows 7. My Active Directory account Stopped working on Win 7 pc after forced password reset from network. I reset password and the AD Account is still locked out on Win 7 pc. I will be locked out of AD account in Win Xp for ½ hour. I have re-imaged the Win 7 pc, have not added any data or the admin pack for Windows 7, and still the AD account will lockout on the Xp machine if I have the Windows 7 pc on the network. If the Win 7 pc is not on the network I can use my AD account with no issues. According to the Administrator for the server group, this lockout is coming from the machine, not on the server side. Any information would be appreciated.

Hi, Maybe this is caused by some Group Policies which set by the administrator. So I strongly suggest to contact the administrator to unlock the account, then check whether have any policies cause this. Thanks. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

I did speak with the administrator, he is convinced that the lockout is coming from my my Windows 7 machine and not on the server. I have had the pc re-imaged with no data transferred, no drive mappings carried over, and have changed the name of the pc. It will still lock out my account if the Winodows 7 pc is on the network. However, I can use my old windows XP pc with no lockout at all. Could there be something in Kerberos or a host file of some sort on the server that is caching some credential that could account for this. Again it is only when I use a Windows 7 pc that this lockout is occurring.

Reimaged? You should have just reinstalled from scratch. Maybe the image has something embedded? A scheduled task with credentials stored?Visit: anITKB.com, an IT Knowledge Base.

I have also re-installed from scratch, still the same issue.

I would go back to the system admin and ask for verification of where the lockouts are occuring. This should be easily found on the domain controllers security logs (assuming that you have auditing enabled). The event ID should be 4740. In the details of that event, it will list the source computer responsible for locking the the account. There is no technical reason why a Windows 7 computer would be causing this. You mentioned that you reintalled the OS from scratch, so that would have taken care of any mappings, scripts, tasks, etc.. that could have been running int he background. Visit: anITKB.com, an IT Knowledge Base.