none
User account locked RRS feed

  • Question

  • I have been have the following problem the last week or so, maybe 5-6 times in all so far.  When I try to access my WHS shared folders from my client pc I get the message;"Windows cannot access \\server".  I then do a remote log-on to my WHS and I find that the "Account is Locked out" box is checked on my user account.  I remove the check and then I can access the Shared Folders, but then the problem occurs again.  What would cause the "Account is Locked out" box to become checked?
    Monday, June 29, 2009 1:29 AM

Answers

  • I have been have the following problem the last week or so, maybe 5-6 times in all so far.  When I try to access my WHS shared folders from my client pc I get the message;"Windows cannot access \\server".  I then do a remote log-on to my WHS and I find that the "Account is Locked out" box is checked on my user account.  I remove the check and then I can access the Shared Folders, but then the problem occurs again.  What would cause the "Account is Locked out" box to become checked?

    There are 2 possibilities:  A) there is a client that is trying to "auto-logon" with the wrong password and B) someone is trying to hack into your server.  I would start by verifying that every network device in your household can connect to your server using your account (without typing any passwords in order to access the server).  If you find a client that it doesn't work, that's most likely your problem.  If they all work, I would suspect someone is trying to access your server from the outside.
    Tuesday, June 30, 2009 1:01 AM
    Moderator

All replies

  • I have been have the following problem the last week or so, maybe 5-6 times in all so far.  When I try to access my WHS shared folders from my client pc I get the message;"Windows cannot access \\server".  I then do a remote log-on to my WHS and I find that the "Account is Locked out" box is checked on my user account.  I remove the check and then I can access the Shared Folders, but then the problem occurs again.  What would cause the "Account is Locked out" box to become checked?

    There are 2 possibilities:  A) there is a client that is trying to "auto-logon" with the wrong password and B) someone is trying to hack into your server.  I would start by verifying that every network device in your household can connect to your server using your account (without typing any passwords in order to access the server).  If you find a client that it doesn't work, that's most likely your problem.  If they all work, I would suspect someone is trying to access your server from the outside.
    Tuesday, June 30, 2009 1:01 AM
    Moderator
  • All clients can access the server with the WHS Console.  But, I have it set up at the WHS console to remember the password.  I don't use passwords on my client computers.  So I don't synchronize them with the server.  I hope that makes sense.  I have had problems the last couple days with my net book being automatically backed up.  I have been doing it manually.  I wonder if that could be the problem.  Also, I have remote access turned off so I wouldn't think someone could hack into it. 
    Tuesday, June 30, 2009 2:24 AM
  • All clients can access the server with the WHS Console.  But, I have it set up at the WHS console to remember the password.  I don't use passwords on my client computers.  So I don't synchronize them with the server.  I hope that makes sense.  I have had problems the last couple days with my net book being automatically backed up.  I have been doing it manually.  I wonder if that could be the problem.  Also, I have remote access turned off so I wouldn't think someone could hack into it. 

    To clarify: it has nothing to do with the Console.  I am talking about accessing the shares on your server.  If you have your set up so that you don't use a password on your client computers, but you need a password to access your server shares, either A) one or more of your clients is trying to connect automatically with an incorrect password or B) someone else is trying to access your server (perhaps from inside your LAN).

    Did you ever change any of the security settings from the server desktop (which would be unsupported)?  How often does it get disabled?  Have you ever waited for the lockout to clear itself?
    Tuesday, June 30, 2009 2:39 AM
    Moderator
  • I think with the shares I can access them without a password until I reboot the client computer.  Then it asks for a log-on, after that I don't have to enter a password until the next reboot.  If a client can't access the shares would it still be able to be automatically backed up by the server?  IF not, maybe the Netbook was causing the problem.  Maybe it was trying to access the server to be backed up.  I also have the add-in Remote Alert installed.  Not sure if that could be locking my account also. 
    I have never changed the security settings.  It has occured maybe 5-6 times in the last week.  No, I have never waited for the lockout to clear.  I didn't know that it would clear by itself
    • Edited by Blueracer Tuesday, June 30, 2009 1:06 PM
    Tuesday, June 30, 2009 10:12 AM
  • I think with the shares I can access them without a password until I reboot the client computer.  Then it asks for a log-on,

    Do you enter a password at this point (or just click OK)?  (The ideal scenario is to have your server and clients work seemlessly, meaning the password for your clients and your server match, even if the password is blank.)

    after that I don't have to enter a password until the next reboot.  If a client can't access the shares would it still be able to be automatically backed up by the server?

    Yes.

    IF not, maybe the Netbook was causing the problem.  Maybe it was trying to access the server to be backed up.  I also have the add-in Remote Alert installed.  Not sure if that could be locking my account also. 
    I have never changed the security settings.  It has occured maybe 5-6 times in the last week.  No, I have never waited for the lockout to clear.  I didn't know that it would clear by itself
    Yes, it will clear itself.  The default policy is to lockout a user account after 50 invalid logon attempts and it resets the account lockout counter after 30 minutes.
    Wednesday, July 1, 2009 12:42 AM
    Moderator
  • Kariya21
    Is there a log file I could look at on the WHS to check and see where the logon attempts are coming from.  50 invalid logon attempts seems like a lot.  Since this has happen 5-6 times I am getting a little worried.  I do have remote access shut off, I only turn it on when I'm going to be away from my home a number of days.  Could an Add-in trigger logon attempts?  I have the following add-ins installed on my WHS: Remote Alert, Remote Notification, Grid Junction, Whiist & Avast. 
    Wednesday, July 1, 2009 2:20 PM
  • Kariya21
    Is there a log file I could look at on the WHS to check and see where the logon attempts are coming from.  50 invalid logon attempts seems like a lot.  Since this has happen 5-6 times I am getting a little worried.  I do have remote access shut off, I only turn it on when I'm going to be away from my home a number of days.  Could an Add-in trigger logon attempts?  I have the following add-ins installed on my WHS: Remote Alert, Remote Notification, Grid Junction, Whiist & Avast. 

    You could look at the Security Logs on the server.  It won't tell you where it's from, but it will tell you when it's happening (so if it's a client, you might be able to pin down which one it is by only having one on at a time).
    Wednesday, July 1, 2009 11:50 PM
    Moderator
  • Have you tried rebooting the server after you make the change to your account?? Might be that simple..

    Cruise
    Thursday, July 2, 2009 12:08 AM
  • Where are the logs located?
    • Edited by Blueracer Thursday, July 2, 2009 11:29 AM
    Thursday, July 2, 2009 11:28 AM
  • If you have different passwords for an account on your server and your local computer, it's possible that Windows (on your local computer) is configured to access some resource on your server. Because you're logged in as e.g. blueracer with no password locally, but on your server you're blueracer with the password Betty_Boop your local PC may be causing the locking of your account on your server through repeated accesses to that server resource.

    The recommendation is probably going to be to use passwords for all users, on all computers. Windows Home Server can help you keep those synchronized.

    I'm not on the WHS team, I just post a lot. :)
    Thursday, July 2, 2009 2:59 PM
    Moderator
  • Where are the logs located?

    The security logs are inside the Event Viewer (right click My Computer > Manage > Event Viewer).  However, please check Ken's post and see if that applies to you first.
    Friday, July 3, 2009 1:03 PM
    Moderator
  • To view the event logs on your server, you should install the server add-in part of the Windows Home Server toolkit. There's no need to use Remote Desktop to access them.
    I'm not on the WHS team, I just post a lot. :)
    Friday, July 3, 2009 2:17 PM
    Moderator
  • To view the event logs on your server, you should install the server add-in part of the Windows Home Server toolkit. There's no need to use Remote Desktop to access them.
    I'm not on the WHS team, I just post a lot. :)

    Oh yeah, I forgot that was there (shows how often I use the toolkit  :)  ).
    Friday, July 3, 2009 3:10 PM
    Moderator