Hi Mohammad, I would start by running a sniffer on the network in order to find out what is going on. If this is going around and you had a fine configuration after your migration then why would it start all of a sudden except for a virus making an ARP request or something? First run a sniffer and then if possible try running a virus sweep on your network. Goodluck, Rotimi _____ From: Mohammad z al khatib [mailto:mohammadzakariaalkhatib@xxxxxxxxxxx] Sent: Friday, June 11, 2004 11:39 AM To: [ExchangeList] Subject: [exchangelist] need help pleaseeeeeeeee http://www.MSExchange.org/ <http://www.experts-exchange.com/Security/Win_Security/searchPreview.jsp > Hi Folks, Having a major crisis at the moment. We have implemented a new Windows <http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> 2k Server <http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> domain <http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> controller a couple of weeks ago. We have migrated from Winnt and still have a mix of workstations running Win95,98,2k,XP and 2k Terminal Server. Everything seemed to go well but a few days later I have come across a serious issue that is driving me up the wall and I can't seem to get to the bottom of the issue. Basically a random account is locking out and when I unlock the user within seconds the account is locked out again. It happens for quite a while and some times it moves around at random to other users in the active directory. Most of the time I re-register the users PC <http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> /Laptop onto the network and it solves the problem however I then discover that it moves to the next person in the list. I rebooted the entire network last week after topping up the license manager and it seemed to solve the problem for a couple of days and then I find that it has returned with a vengeance. I tried rebooting the network again last night as I am starting to get quite desperate and after coming in this morning I find that the problem is still with us. I have been off site for most of the day and have learned that it has made it's way around the list and I am finding the users are starting to get as annoyed as myself. Can anyone shed any light on the subject or give some pointers. I am vastly becoming behind on my work schedule as I cannot get this issue resolved. It's fair to say that I am starting to get sleepless nights over the problem Thanks. Mohammad al khatib _____ MSN 8 helps ELIMINATE E-MAIL VIRUSES. <http://g.msn.com/8HMBEN/2752??PS=47575> Get 2 months FREE*. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: ronagh@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
