Password locked on some users

Question

Hello everyone,

Let me tell you that I'm having a problem, on certain Windows 10 computers (approximately 10) the user's password is blocked without the user having made a mistake or after the computer puts on the screen saver or even when it is using it and wants to access It takes some resource to enter and automatically your account is already blocked.

So I began to determine and see where the blocking is originating from, with the help of the security and auditing policies and the entire process that the detection entails, and all these users blocking is generated from their own computers, they are not user accounts. service, they are not assigned to services or the like, they are domain users without special permissions.

All these users have in common that they access shared folders, have RDP access to a system and the first attempt the password is blocked. Then we proceeded to remove these mapped drives and access to shared folders to re-enter the password, but the result is the same. An attempt was made to change the password from the same computers and it returns the message that the password is invalid and does not comply with the characteristics. But this does not happen if I log in with the same user on another computer, it accesses the mapped drives without problems, the system that connects via RDP, if I can change the password from the computer.

Has this happened to anyone??

I hope I can have your help.

Answer 1

Hello,

The most common reason behind this sort of behavior is that there is an application, network drive, or other access that has stored old credentials from this user and it is trying to connect using those. The best way to resolve it, would be to recreate the user profile in the affected computer with these methods:

1. Press “Windows + R” to open the Run dialog, type “systempropertiesadvanced.exe” , In the “Advanced” tab, look for the “User Profiles” heading and click “Settings…”. and delete the user profile. Have the user to log in again to create the profile again. Beware that this process will delete all profile information and settings stored, as well the profile folders
2. If the previous does work, you can delete the registry information for the profile too. In the registry, under the path Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ProfileList , you can click each of the profile ID and see the Username on the key “ProfileImagePath”

If instead you want to try first a workaround, you can execute the next Batch script to swipe Credential Manager (this will only fix issues with Stored Credentials):

@Echo off
cmdkey.exe /list > "%TEMP%\List.txt"
findstr.exe Target "%TEMP%\List.txt" > "%TEMP%\tokensonly.txt"
FOR /F "tokens=1,2 delims= " %%G IN (%TEMP%\tokensonly.txt) DO cmdkey.exe /delete:%%H
del "%TEMP%\List.txt" /s /f /q
del "%TEMP%\tokensonly.txt" /s /f /q
echo Completed
pause

---------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--