Microsoft Dynamics Forums Homepage

Forum Home Forum Home > Microsoft Dynamics GP (Great Plains) > GP - Installation and Administration
  New Posts New Posts RSS Feed - Locked Accounts
  FAQ FAQ  Forum Search   Register Register  Login Login


Locked Accounts

 Post Reply Post Reply
Author
Message
tbrothers View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 18 2008
Location: Virginia Beach
Status: Offline
Points: 13
Post Options Post Options   Thanks (0) Thanks(0)   Quote tbrothers Quote  Post ReplyReply Direct Link To This Post Topic: Locked Accounts
    Posted: July 18 2008 at 10:53am
Hi:
We upgraded from SQL 2000 Ent to SQL 2005 Ent over the July 4th weekend.  Since then there have been and continue to be sporadic "Locked Account" messages when a user attempts to login to GP.
 
What I am currently doing to get the user logged in is to open the properties of the SQL Login object, deselect "Enforce Password Policy" and click OK.  I immediately open the properties again and reselect "Enforce Password Policy" and click OK.  Now the user can login to GP without any problems.
 
Any ideas?
 
Our Environment
Windows 2003 Ent
SQL 2005 Ent
Great Plains Dynamics 9
Regards,
Terry
Back to Top
Sponsored Links


Back to Top
daoudm View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: February 04 2008
Location: Amman
Status: Offline
Points: 442
Post Options Post Options   Thanks (0) Thanks(0)   Quote daoudm Quote  Post ReplyReply Direct Link To This Post Posted: July 19 2008 at 8:07am
This stupid solution will help!
DELETE All users from the DYNAMICS and all companies databases then go to SQL security folder and delete all users as well -for sure execluding the SA- then recreate all users on each database, make sure that each user is assigned to DYNGRP role and db_owner role.
Mohammad R. Daoud [MVP]
+962 - 79 - 999 65 85
mohdaoud@gmail.com
http://mohdaoud.blogspot.com
Back to Top
tbrothers View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 18 2008
Location: Virginia Beach
Status: Offline
Points: 13
Post Options Post Options   Thanks (0) Thanks(0)   Quote tbrothers Quote  Post ReplyReply Direct Link To This Post Posted: July 19 2008 at 10:26am
You are correct - It is a stupid solution.
 
So why do you clutter up the forum with it?
Regards,
Terry
Back to Top
dirish74 View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 24 2008
Status: Offline
Points: 4
Post Options Post Options   Thanks (0) Thanks(0)   Quote dirish74 Quote  Post ReplyReply Direct Link To This Post Posted: July 24 2008 at 10:54am
Hi Terry,
 
Are you using the SQL 2005/AD password policy integration?
Back to Top
tbrothers View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 18 2008
Location: Virginia Beach
Status: Offline
Points: 13
Post Options Post Options   Thanks (0) Thanks(0)   Quote tbrothers Quote  Post ReplyReply Direct Link To This Post Posted: July 24 2008 at 12:18pm

I know what is causing this.  We have "Enforce Password Policy" and
"Enforce Expiration" enabled but when the user is prompted to change
their network (domain) password they are NOT prompted to change their
Great Plains password.  GP simply replies that their GP account has
been locked.


Now I have to figure out why GP doesn't prompt the user to change
their password.
Regards,
Terry
Back to Top
dirish74 View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 24 2008
Status: Offline
Points: 4
Post Options Post Options   Thanks (0) Thanks(0)   Quote dirish74 Quote  Post ReplyReply Direct Link To This Post Posted: July 24 2008 at 1:07pm

In your AD password policy, what do you have the max attempts threshold set to?

Back to Top
tbrothers View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: July 18 2008
Location: Virginia Beach
Status: Offline
Points: 13
Post Options Post Options   Thanks (0) Thanks(0)   Quote tbrothers Quote  Post ReplyReply Direct Link To This Post Posted: July 25 2008 at 1:10pm
5 invalid attempts
Reset account lockout counter after 10 minutes
Regards,
Terry
Back to Top
JonEast View Drop Down
MicrosoftDynamicsForums.com Member
MicrosoftDynamicsForums.com Member


Joined: January 24 2008
Location: UK
Status: Offline
Points: 67
Post Options Post Options   Thanks (0) Thanks(0)   Quote JonEast Quote  Post ReplyReply Direct Link To This Post Posted: July 28 2008 at 5:44am

Ensure that the DSN's are using the SQL Native Client ODBC driver rather than the SQL Server ODBC driver.

Jon.
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down


Copyright 2013 microsoftdynamicsforums.com. All rights reserved. MicrosoftDynamicsForums.com is an independent non-Microsoft website.
Email: contact AT microsoftdynamicsforums DOT com