I have an AD user account which cannot be unlocked, AD is running on Win2k3.
I can uncheck the "Account is locked out" check box and click Apply then OK, but the next immediate moment when I open the property dialog the account is still locked.
I changed the group policy on Windows Settings > Security Settings > Account Lockout Policy > everything undefined. But the account stil gets locked out.
There could be an improper shutdown of the client computer the last time it was used.
What could be wrong? Thanks for advice.
EDIT: Following Chadddada's advice, I created a .bat file to execute the commands and simultaneouly hit the "enter" button on the client computer login screen --- i'm logged in now!
But checking back in AD, the account is still locked out! I don't think there is any machine set to "brute force" that user account with random passwords. Any idea why it would auto lock out?
EDIT (Update): Checking in the Event Viewer > Security logs, the prime suspect is
Pre-authentication failed: User Name: lesliet User ID: COUNTRY\lesliet Service Name: krbtgt/COUNTRY.COMPANY.COM Pre-Authentication Type: 0x2 Failure Code: 0x12 Client Address: 192.168.xxx.yyy
192.168.xxx.yyy is actually our secondary DC running AD on Win2k8.. But this is beyond what I know already. Any more help is greatly appreciated!