Users getting locked out

whitelightrider

Folks,

I have a number of users who are getting locked out of their sessions periodically during the day. I cant seem to figure out why though, and its only happening to a certain few.

We have 2 domain controllers. One in Galway, one in Dublin. The users log into Galway, launch a Citrix session that connects them to Dublin where they use their applications.

However during the day they will get locked out periodically. There's nothing showing up in the Event Viewer. And everything they use is on the Citrix servers.

Can anyone shed any light on this for me?

RoadKillTs

Well its hard to know but I know that can happen if you have a Conflicker breakout on the network.

We had it here on a site and the acc's were locking out all the time, it was showing up on the event viewer though.
The whole site was riddled with it.

whitelightrider

RoadKillTs wrote: »

Well its hard to know but I know that can happen if you have a Conflicker breakout on the network.

We had it here on a site and the acc's were locking out all the time, it was showing up on the event viewer though.
The whole site was riddled with it.

Ill check it out here and see. 1 particular user isnt even in today. I unlocked his account this morning, and I just checked it there and it was locked out.

LoLth

also check and see if they have installed anything using their own user/pass on another machine. programs that run as a service using a user's credentials dont necessarily get updated when the user changes their password (seen it happen with crystal reports installed as a local admin account but not "the" local admin account). could be locking them as it tries , unsuccessfully, to contact a central server or database.

Overheal

Silly Hail Mary, but are parental controls on?

macrubicon

You might want to check the logging detail level you have turned on - it might be set a little low for some reason.

You should be seeing login failed attempts in the security log or application log for the users though - very strange if not.

No one has gone poking about with Group Policy on you ?

whitelightrider

LoLth wrote: »

also check and see if they have installed anything using their own user/pass on another machine. programs that run as a service using a user's credentials dont necessarily get updated when the user changes their password (seen it happen with crystal reports installed as a local admin account but not "the" local admin account). could be locking them as it tries , unsuccessfully, to contact a central server or database.

Nope, they dont have access rights to install anything on the machines. The plot thickens!!

whitelightrider

macrubicon wrote: »

You might want to check the logging detail level you have turned on - it might be set a little low for some reason.

You should be seeing login failed attempts in the security log or application log for the users though - very strange if not.

No one has gone poking about with Group Policy on you ?

I did change the Group Policy about 2 weeks ago to stop them accessing the Games on the PC's. Management "Request". Ive disabled that Group Policy now and Ill monitor it throughout the day to see if that makes any difference.

whitelightrider

No joy folks. Still getting locked out even though Ive disabled the Group Policy and also rebuild their user profiles.