At IU, why is my ADS domain account locked?

If your Indiana University ADS domain account has been locked, you will receive the following error message when you attempt to log in:

"Unable to log you on because your account has been locked out, please contact your administrator."

An ADS domain account can be automatically locked for several reasons:

• If you have incorrectly entered your password 25 times within 2 hours while trying to log into the ADS domain, your account will be locked.
  
  
• If you have installed the Active Directory client (dsclient) on Windows 95, 98, or 98SE, and you've typed your password incorrectly on that computer, your account may be locked.
  
  
• If you have changed your ADS domain account password while you were logged into another computer with the same ADS domain account, your account can be locked. In this case, the first computer you were logged into will attempt to renew its authentication using invalid credentials held in a cache. While performing this operation, the account becomes locked.
  
  
• Your account can be locked if you have changed your ADS domain account password while a Microsoft Outlook session using the same ADS account credentials is active. This happens because the Outlook client periodically attempts to renew its connection to the Exchange server using invalid credentials held in a cache. To prevent the account lockouts from occurring, close the Outlook session that was opened prior to changing the password.
  
  
• If your computer is not configured to use the NTLMv2 authentication protocol, your account can be locked; see LM, NTLM, and NTLMv2 on the IU network.

If you need to use your ADS domain account immediately, contact your campus Support Center.

If you do nothing, your account will remain locked for a set period of time.

For more information on locked accounts, see articles 300436 and 271496 at the Microsoft Help and Support web site.

Search Microsoft Help and Support.

Comments/Questions/Corrections