Hey Rory, What i would do is set up a security policy to audit and log all security activity.. what may be happening (and the event log will show this) is that you have the login tries and lockout too strict. I've had a few users with this problem that when they sometimes left outlook running it would cause logon errors and 5 tries later their account would get locked out and I would have to reset it manually.. The best thing to do is find the source of it and estimate the occurance. Also, to unlock a user, all you have to do is enter active directory > Username > Properties > Account > then uncheck "Account is locked out" Hope that helps.. .frihani -----Original Message----- From: Rory Grobler [mailto:groblerr@xxxxxxxxx] Sent: Friday, May 10, 2002 3:35 AM To: [ExchangeList] Subject: [exchangelist] Active Directories http://www.MSExchange.org/ Greetings This is not really exchange related, but I have had a real good response from you guys that I thought I would ask you opinion about this one. I am running windows 2000, obviously with AD, from time to time my users get locked out, after I reset there passwords, they get prompted to change there passwords, the message that the domain is not available comes up. I resolve this by re-adding the machine to my domain, this is not an acceptable resolution, as it is rather time consuming. I also find that the users accounts get locked out for no apparent reason. I would really appreciate some feed back, as I have found nothing on the web or TechNet. Thanks in advance Rory **Disclaimer** The contents of this e-mail, which may include one or more attachments, is strictly confidential, and is intended solely for the use of the named recipient(s). If you have received this e-mail in error, you are not permitted to and must not disclose, distribute, or retain it, and are requested to please notify the sender immediately by return e-mail and delete it thereafter. E-mail is not necessarily secure or error free as information could arrive late or contain viruses or could be incomplete, intercepted, corrupted, lost or destroyed. It is the responsibility of the named recipient(s) to ensure that e-mails are virus free. No employee is authorised to conclude a binding agreement on behalf of either OUTsurance Insurance Company Limited or any of their subsidiaries ("OUTsurance") by e-mail. The use of electronic mail is intended for business. If it is used for any other purpose, the views expressed are those of the sender and no liability will attach to OUTsurance. ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: fares@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')