Problem with a domain, Vista and a user

[dangel]

Any help on this would be appreciated - I know we have some networking bods on here.. So here's the problem:

*User with pre-existing domain account used on old laptop (Win XP)
*User moves to new laptop, running Vista (business) which is _off domain_
*User tries to access resources on the domain (shares) with require authentication using mapping like so:

net use s: \\y489484\Software /USER:mydomain\myusername mypassword /PERSISTENT:NO

*Passwords cycle every 60 days

*Users account keeps getting disabled.

It looks very much like Vista is supplying the wrong credentials and causing the domain to lock out the account - our IT department have basically said "bugger this it's Vista" as they don't officially support it (yet) - hence we're all off domain. Now we've got plenty of other Vista PCs (including my own) which have no such problems. So why this account?

The user reports:
"Open Windows Explorer and click on "Network". All the different servers are visible"
[Support says:] "krbtgt has flagged an error (Kerberos Ticket get Ticket)
Microsoft Authentication service 1.0 tries to register an illegal (unknown) user "blah" with password"


Any clues? Further info that would help?

Many thanks folks.

[Splash]

Something must be providing the incorrect password - is said user accessing any other domain resources other than this mapped drive? Is there another user with a similar username who could be mistyping and causing a lockout?

[dangel]

How about a printer mapping? I've discovered he's mapped printers via an on-domain pc (rather than directly) so i'm guess it might be authenticating with his old username/password and breaking things.

App. out IT lot think it's a clever idea to set the threshold to just 3 attempts..

They're unlocking the account so will know soon.

[Splash]

A printer mapping could do it, I guess

[Splash]

Out of interest did you ever nail this?

[dangel]

Yup - thanks for reminding me to update this - yes it was down to Vista remembering expired passwords for printer mappings. If you add the printer directly you don't have the problem.

Sorted

[Splash]

good to hear.