user locked out of domain account

[lmead]

FileMaker 8.0v4 Server Advanced on Windows 2003 server

Client running Windows XP, SP2

When client was switched to a new computer, external authenticated no longer worked; in addition, client was then locked out of her domain account. The problem is only on this one computer and locks out any user who attempts to use SSO on this computer. The databases can be accessed using the domain account when SSO is by-passed.

The problem has been fixed by de-selecting the security setting on the server "Display only the databases each user is authorized to access". However, we do not want to eliminate this security feature and we would like to understand what the problem is.

[Wim Decorte]

seems to be a problem with the OS & domain on that machine. Is it properly joined to the domain? Does it show up in the AD list of computers (on the AD machine)? Can you log into the OS using a domain account and browse the AD domain without getting prompted for credentials?

[lmead]

The problem occurs only when the security option "display only databases user has access to" is selected. It seems that it passes a corrupted username/password or fails to pass one at all. The AD allows only 3 attempts before locking up the account. I think the user gets locked out and then the user is asked to input her credentials at which time they are on longer valid. When the security option is de-selected, the user is able to select a database she has access to and it opens up without asking for her credentials (SSO). SSO works for other services on this machine. The only problem is with FileMaker and in the instance of first filtering the databases.

[Wim Decorte]

that's why I said there seems to be a problem with the domain setup on the workstation.

You might want to drop the machine from the domain, reboot, add the machine to the domain, reboot, and try again.

[lmead]

Yes, we have already removed the computer from the domain, re-booted, re-added it. Nothing fixed it. There is either something corrupted in the OS or on the server or there is some conflict in the security settings between the client and the server but it only manifests itslef when the databases are filtered.

[Wim Decorte]

any clues in the security event log on the active directory?

[lmead]

We will have to request the log.

Thanks for your help.