User can login to their pc while account is lock or password was expired


hi,

i don't understand why domain control allow user login on pc while password expired or account locked. 1 please.

thanks,

preyash parekh

hi preyash,

this happen many reasons.

  • if users network disconnected or blocked hitting dc may authenticating cached credentials (can disabled gpo)
  • if users dc cannot communicate pdc check lock out state
  • if domain not replicating , account issue has not adequately replicate

in short, you'd need provide lot more information specific scenario face, issue cached credentials.

kind regards,

shane



Windows Server  >  Directory Services



Comments

Popular posts from this blog

CRL Revocation always failed

Failed to query the results of bpa xpath

0x300000d errors in Microsoft Remote Desktop client