Article ID: 279672
Article Last Modified on 10/30/2006
APPLIES TO
- Microsoft Windows 2000 Professional Edition
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q279672
SYMPTOMS
On a Microsoft Windows 2000-based computer, when you use the Passprop.exe command-line tool with the /adminlockout command-line option, the Administrator account is not locked out as you expect after a specified number of failed logon attempts over the network. You experience these symptoms although the graphical user interface (GUI) indicates that the account is locked out.
CAUSE
This problem occurs because the account lockout logic in the Integrated Windows authentication (NTLM) protocol incorrectly interprets the Passprop.exe security setting.
RESOLUTION
To resolve this problem, obtain and install the latest service pack for Windows 2000. For additional information about how to obtain the latest service pack for Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base:
260910 How to obtain the latest Windows 2000 service pack
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Microsoft Windows 2000 Service Pack 2.
MORE INFORMATION
For additional information about the new file naming schema for Microsoft Windows software update packages, click the following article number to view the article in the Microsoft Knowledge Base:
816915 New file naming schema for Microsoft Windows software update packages
For additional information about the terminology that is used in this article, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Keywords: kbqfe kbbug kbfix kbwin2000presp2fix KB279672
