AD users getting locked when they change password

[venkat257]

Hi there,

There is a 2500 Wirless Lan Controller and the AD users get locked when they change the password. The users are mobile users. Kindly let me know how to proceed. Thanks.

BR, 

Krishna

[Trent Hurt]

Try this on your ad server

https://technet.microsoft.com/en-us/library/cc780271(v=ws.10).aspx

Password history check (N-2): Before a Windows Server 2003 operating system increments badPwdCount, it checks the invalid password against the password history. If the password is the same as one of the last two entries that are in the password history, badPwdCount is not incremented for both NTLM and the Kerberos protocol. This change to domain controllers should reduce the number of lockouts that occur because of user error.

[venkat257]

Hello Trent,

Windows 2008 R2 is the AD server and there is a RADIUS server also. When the mobile user tries to login through wireless, the requests goes to RADIUS which should be diverted to AD server. I believe this request does not go to AD server to authenticate. Please share your thoughts