Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Right now I have a user who is able to use his domain credentials to log in to any server on our network, except one. The server that he cannot log in to allows other domain users to connect, but when he tries to connect it says that he is unauthorized.

When a user is locked out in an Active Directory environment, is it at the domain level or is it on a particular server?

share|improve this question
add comment

1 Answer

up vote 14 down vote accepted

Domain account lockouts are not per-member. They are domain-wide.

This user probably hasn't been added to the local administrators group (or the Remote Desktop Users group) on this particular server. The error message that you're describing is not the one that you would see if the account was locked.

share|improve this answer
    
Fantastic, that's the clue I was looking for. I appreciate your help! –  Matthew Jan 25 '13 at 16:41
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.