Dear All,
Yesterday, I changed some settings in our Group Policy (Server 2008 R2). I changed following settings,
Password Policy >> Minimum Password Age
Account Lockout Duration >> 30 Mins
Account Lockout Threshold >> 6
REset Account Lockout Counter After >> 30 mins.
Today I came across extremely strange problem on one of the user PC (Windows 7, Domain). The user loggedin but Outlook 2007 was constantly asking for password. On typing correct password it still could not take it. I checked the account it was locked in AD, unlocked it but again after logging in outlook kept asking for password. The user again got locket out of AD. This vicious cycle continued and I was puzzled. I reset all the Group Policy back to day 1 and issued gpupdate /force on both client and server but the same problem persisted. The system doesnot seem to get updated GPO. Then I came across an article which mentioned about network shares being mapped on the system and Netwrix Account Lockout Examiner. I got the a culprit shared drive which I removed and then problem got solved. Now I have two questions,
1) I have around 60 user PC's with network drives shared.If I put account lock out policies all of them will be affected. How can I make sure they are not affected.
2) Why the GPO didnot reflected instantly when I issued gpupdate /force command on both server and client.
Thanks