Win 98 users keep getting locked out

[Jordan]

Archived from groups: microsoft.public.win2000.security (More info?)

I have two W2K SP4 domain controllers and two W2K3 servers. I also have
about fifty XP or 2000 workstations and three Win98 workstations. I have
been having a problem lately where users logged onto any of the 98
workstations will randomly get their accounts locked out. The funny thing
is that the lockout only seems to happen when the user is away from the
station for a while so I know they are not retrying their password and
failing.

For instance, this morning one of the users logged onto the 98 workstation
at 6:00. They went to a meeting at 10:00 and I see in my security log that
there were "bad password" events coming from that station at 10:45. Now I
know that no one logged him out just to try to log him back in again. Also,
his computer still showed that he was still logged in locally.

This has happend to him no matter which 98 station he uses and it has
happened to other users that logged onto the 98 workstations.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Try installing the Client for Directory Services on those Windows 98 computers,
or at least one of them to see if it makes a difference, and then make the
necessary registry changes to enable SMB signing and ntlmv2 authentication. If
you are using wins, which is a good idea if still using Windows 98, make sure
the domain controllers, Windows 2003 servers, and Windows 98 computes are all
wins clients. Windows 2003 Servers in particular have security option settings
that can cause problems with downlevel clients such as Windows 98 as referred to
in the last link if problems persist. You can access Local Security Policy on
Windows 2003 Servers via secpol.msc. The links below explain more. --- Steve

http://support.microsoft.com/kb/288358 -- refer to part about Windows 98 and
where to download from for the latest version.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q239869 --- Windows 98
ntlmv2 enabling
http://support.microsoft.com/default.aspx?scid=kb;en-us;230545 --- Windows 98
SMB enabling
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659 --- security
setting incompatibilities

"Jordan" <nojunk_allowed@nospam.com> wrote in message
news:eUhHY1eGFHA.4084@TK2MSFTNGP14.phx.gbl...
> I have two W2K SP4 domain controllers and two W2K3 servers. I also have
> about fifty XP or 2000 workstations and three Win98 workstations. I have
> been having a problem lately where users logged onto any of the 98
> workstations will randomly get their accounts locked out. The funny thing
> is that the lockout only seems to happen when the user is away from the
> station for a while so I know they are not retrying their password and
> failing.
>
> For instance, this morning one of the users logged onto the 98 workstation
> at 6:00. They went to a meeting at 10:00 and I see in my security log that
> there were "bad password" events coming from that station at 10:45. Now I
> know that no one logged him out just to try to log him back in again. Also,
> his computer still showed that he was still logged in locally.
>
> This has happend to him no matter which 98 station he uses and it has
> happened to other users that logged onto the 98 workstations.
>
>