At IU, why is my ADS Domain account locked?

If your Indiana University ADS Domain account has been locked, you will receive the following error message when you attempt to log in:

"Unable to log you on because your account has been locked out, please contact your administrator."

An ADS Domain account can be automatically locked for several reasons:

• If you have incorrectly entered your password 25 times within 2 hours while trying to log into the ADS Domain or the IU.EDU Kerberos realm, your account will be locked.
  
  
• If you have installed the Active Directory client (dsclient) on Windows 95, 98, or 98SE, and you've typed your password incorrectly on that computer, your account may be locked.
  
  
• If you have changed your ADS Domain account password while you were logged into another computer with the same ADS Domain account, your account can be locked. In this case, the first computer you were logged into will attempt to renew its authentication using invalid credentials held in a cache. While performing this operation, the account becomes locked. To prevent this from happening in Windows 2000 or later, you should always log into the IU.EDU Kerberos realm rather than directly into the ADS Domain.
  
  
• Your account can be locked if you have changed your ADS Domain account password while a Microsoft Outlook session using the same ADS account credentials is active. This happens because the Outlook client periodically attempts to renew its connection to the Exchange server using invalid credentials held in a cache. To prevent the account lockouts from occurring, close the Outlook session that was opened prior to changing the password.
  
  
• If your computer is not configured to use the NTLMv2 authentication protocol, your account can be locked; see LM, NTLM, and NTLMv2 on the IU network

If you need to use your ADS Domain account immediately, contact your campus Support Center; see How do I contact my campus Support Center, and what are the hours and options for help?

If you do nothing, your account will remain locked for a set period of time.

For more information on locked accounts, see articles 300436 and 271496 in the Microsoft knowledge base.

You can search Microsoft's knowledge base at:

Also see:

• At IU, how do I create an ADS Domain account?
• What is the difference between my Network ID and my ADS Domain account?
• At IU, does UITS support Active Directory clients for operating systems other than Windows 2000 and XP Professional?
• In Windows 2000 or XP, how do I troubleshoot authentication problems against the IU.EDU Kerberos realm?
• At IU, in Active Directory, how do I authenticate to the Kerberos realm (IU.EDU)?
• What is an IU Network ID?