Outlook Anywhere Account Lockouts
Hi,
I am having issues with 1 outlook account using rpc over https in exchange 2007. The account seems to lock out caused by outlook anywhere. Does anyone have any good troubleshooting steps to easily see the issue causing this? Also, the account
does pop-up with a cert error as this is only an smtp domain. I have tested with other accounts that do not have the issue, even with the cert pop-up, but at a loss what is causing the lockout. I did enable the basic auditing in AD, and shows bad
password or user name. It is showing the domain that the computer is using when it fails vs the company AD domain when it fails. Is there any good debugging tools that can be used to better figure this out?
Thanks,
August 17th, 2010 5:22am
On Tue, 17 Aug 2010 02:22:45 +0000, jag20191 wrote:
>I am having issues with 1 outlook account using rpc over https in exchange 2007. The account seems to lock out caused by outlook anywhere. Does anyone have any good troubleshooting steps to easily see the issue causing this? Also, the account does pop-up
with a cert error as this is only an smtp domain. I have tested with other accounts that do not have the issue, even with the cert pop-up, but at a loss what is causing the lockout. I did enable the basic auditing in AD, and shows bad password or user name.
It is showing the domain that the computer is using when it fails vs the company AD domain when it fails. Is there any good debugging tools that can be used to better figure this out?
If the domain doesn't match I don't think the account would get locked
out -- because the domain doesn't exist the account should never match
something in another domain.
Are you sure it's Outlook that the cause of the problem and not
something like a mobile device using ActiveSync?
I've seen this happen when someone "forgets" they used a mobile
device. The way the lockout mechanism works is that the previous two
passwords aren't counted against the lockout count. But when the user
changes the password a third time, and the mobile device tries to use
the password frm three changes ago, it counts against the lockout
count and the user is locked out. This is bad enough with MS Windows
Mobile, but with something like an iPhone that just keeps hammering
away with the same old password it get annoying really fast. The only
way to "fix" the problem is to either hard-reset (or wipe) the mobile
device or remove the ActiveSync partnership from the device (or change
the password, of course).
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2010 6:14am
They are using active sync, but the phone seems to work until Outlook opens and prompts for credentials and locks out the account. Is there a way to store credentials in the registry for outlook?
August 17th, 2010 2:58pm
On Tue, 17 Aug 2010 11:58:41 +0000, jag20191 wrote:
>They are using active sync, but the phone seems to work until Outlook opens and prompts for credentials and locks out the account. Is there a way to store credentials in the registry for outlook?
I'd try a new profile first. Then try nuking the protected system
provider subkey:
http://support.microsoft.com/kb/290684
http://www.pchell.com/support/oepassword.shtml
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
August 18th, 2010 1:00am