The Administrator account is not locked out as you expect when you use the Passprop.exe command with the /adminlockout option in Windows 2000 (279672)
The information in this article applies to:
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q279672 SYMPTOMSOn a Microsoft Windows 2000-based computer, when you use the Passprop.exe command-line tool with the /adminlockout command-line option, the Administrator account is not locked out as you expect after a specified number of failed logon attempts over the network. You experience these symptoms although the graphical user interface (GUI) indicates that the account is locked out. CAUSE
This problem occurs because the account lockout logic in the Integrated Windows authentication (NTLM) protocol incorrectly interprets the Passprop.exe security setting.
RESOLUTIONTo resolve this problem, obtain and install the latest service pack for Windows 2000.
For additional information about how to obtain the latest service pack for Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base:
260910
How to obtain the latest Windows 2000 service pack
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Microsoft Windows 2000 Service Pack 2.
| Modification Type: | Major | Last Reviewed: | 5/20/2004 |
|---|
| Keywords: | kbQFE kbbug kbfix kbWin2000PreSP2Fix KB279672 kbAudITPRO |
|---|
|