Account gets locked in AD when connecting to a VPN

Hoogwerf Raymond 0 Reputation points
2023-12-15T11:20:38.27+00:00

Hello,

My colleague sometimes needs a connection with VPN to the UK,

Everytime he does this, his acoount on AD gets locked.

He tried to delete the credentials manager, but that doesn't help.

Could it be something on UK side?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,809 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Thameur-BOURBITA 35,256 Reputation points
    2023-12-16T12:28:01.88+00:00

    Hi @Hoogwerf Raymond

    It seems that the password has been changed on active directory and the computer cache keeps the old password.

    Try to ask them to go to the office , connect on the network then try to login. Once done windows cache will be updated with the good password. If the account locked , the user has to reset his password


    Please don't forget to accept helpful answer

    0 comments No comments

  2. Daisy Zhou 28,161 Reputation points Microsoft Vendor
    2023-12-19T02:17:24.5733333+00:00

    Hi Hoogwerf Raymond,

    Thank you for posting in Q&A forum.

    It’s possible that the issue is on the UK side, but it’s also possible that there is an issue with the VPN connection or the credentials. Here are some steps that your colleague can take to troubleshoot the issue:

    Check the VPN connection: Ensure that the VPN connection is stable and that the correct credentials are being used to connect to the VPN server. If the connection is unstable, it could cause the account to be locked out.

    Check the credentials: Ensure that the correct credentials are being used to connect to the VPN server. If the credentials are incorrect, it could cause the account to be locked out.

    Check the account settings: Check the account settings to ensure that the account is not set to lock out after a certain number of failed login attempts. If this is the case, it could cause the account to be locked out.

    Check the AD logs: Check the Active Directory logs to see if there are any errors (event ID 4771 and Event ID 4740 OR event ID 4776 and Event ID 4740 ) or warnings related to the account lockout. This could help identify the root cause of the issue.

    Hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

     

    Best Regards,

    Daisy Zhou

     

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.