Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Right now I have a user who is able to use his domain credentials to log in to any server on our network, except one. The server that he cannot log in to allows other domain users to connect, but when he tries to connect it says that he is unauthorized.

When a user is locked out in an Active Directory environment, is it at the domain level or is it on a particular server?

share|improve this question
up vote 14 down vote accepted

Domain account lockouts are not per-member. They are domain-wide.

This user probably hasn't been added to the local administrators group (or the Remote Desktop Users group) on this particular server. The error message that you're describing is not the one that you would see if the account was locked.

share|improve this answer
Fantastic, that's the clue I was looking for. I appreciate your help! – Matthew Jan 25 '13 at 16:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.