New sysadmin. I need help with an issue. I hope you can help me 🙂

Posted by bilbo_ballbags_8D@reddit | sysadmin | View on Reddit | 17 comments

I have users who locked theirselves out of their account.

I reset their problem but then after logging in and changing the pw to their choice; their outlook hangs and won’t update/synch and won’t connect.

Is this normal? What is the cause and how can I resolve it?

Should I delete their outlook profile and readd it? If I do this, will it delete all their mails for good?

[-]

Blade4804@reddit

you reset their problem? nice. my users would hate me if I reset their problems after fixing them.

[-]

bilbo_ballbags_8D@reddit (OP)

No I reset their login because they forget the password and then the issue happened

[-]

Outlook always appears to hang - Sometimes it's just being slow. Wait 5 mins before assuming outlook knackered, then simply create a new profile - Their email will download again. Don't forget the NK2 file. Google it.

[-]

bilbo_ballbags_8D@reddit (OP)

I reset their AD account because they forget password or tried too many times and got locked out. Then the problem with outlook happened. One user had the issue today, the other issue started two days ago.

[-]

sorderon@reddit

new profile, add the NK2 file from old profile, check signature, job done.

[-]

RAMSxAI@reddit

Reboot

[-]

therealyellowranger@reddit

The easiest thing to do is to review the security event logs on the domain controller. These logs can help identify the root cause of the account lockouts. In many cases, the issue stems from an outdated device such as a mobile phone still attempting to authenticate with an expired password.

[-]

TrippTrappTrinn@reddit

Turn off their computer. Unlock account. Check if it locks again. If it does, check AD logs to find cause. If not, start computer and let the user log in. Does it lock? If yes, find out where the old password is stored. If no, start Outlook. If the account locks, Outlook must have stored a password. Not sure how it will do that, but as others have mentioned, clear credentials manager.

[-]

CloudNCoffee@reddit

Usually points to a cached credentials/profile issue. New profile + clear saved credentials tends to sort it.

[-]

xMcRaemanx@reddit

On prem DC or azure. On prem email or exchange online.

I'm gonna guess Hybrid with onprem DC and Cloud email. There's a lag time between unlocking on the DC and the replication to azure, force a sync and it should be faster.

If you login to owa when this happens is there any difference?

[-]

bilbo_ballbags_8D@reddit (OP)

It’s all on prem

[-]