User can login to their pc while account is lock or password was expired
hi,
i don't understand why domain control allow user login on pc while password expired or account locked. 1 please.
thanks,
preyash parekh
hi preyash,
this happen many reasons.
- if users network disconnected or blocked hitting dc may authenticating cached credentials (can disabled gpo)
- if users dc cannot communicate pdc check lock out state
- if domain not replicating , account issue has not adequately replicate
in short, you'd need provide lot more information specific scenario face, issue cached credentials.
kind regards,
shane
Windows Server > Directory Services
Comments
Post a Comment