The company is using Microsoft Office 2013/365 with Exchange 213. Ever since the migration, when passwords are changed in Active Directory, the accounts get locked out. Why does this keep happening? We are not using the Azure Active Directory platform. What are the ramifications of removing the MicrosoftOffice15 Generic Credentials through Credential Manager?

Hi,

Based on my research, account lockouts could be caused by several reasons, such as:

• Programs
• Service accounts
• Bad Password Threshold is set too low
• User logging on to multiple computers
• etc

"What are the ramifications of removing the MicrosoftOffice15 Generic Credentials through Credential Manager?" -- Many programs cache credentials or keep active threads that retain the credentials after a user changes their password. Office 2013 stores the credentials in Credential Manager. You can try clearing the MicrosoftOffice15 Generic Credentials to see the result. The credentials will be recreated after you enter and save the passwords in Office programs.

Some references for you:

https://technet.microsoft.com/en-us/library/cc773155%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

http://social.technet.microsoft.com/wiki/contents/articles/4585.account-locked-out-troubleshooting-eventcombmt.aspx

https://social.technet.microsoft.com/Forums/windowsserver/en-US/9e1bbeb2-721d-4bde-832d-882795f964b6/active-directory-user-get-locked-frequently-from-1-pc?forum=winserverDS

Since this issue is more related to AD, if you need further assistance on this issue, I'd recommend you post a new question to the forum for AD:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverDS

The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.

Steve Fan
TechNet Community Support