NetId Automatic Account Lockout

What is automatic account lockout and how do I correct it?

Have you changed your NetID password recently?  

Automatic account lockouts typically activates after multiple consecutive failed login attempts to a specific authentication system.  To better understand the automatic account lockouts, it's important you understand that we have two independent authentication systems with auto-lock protection. 

Two independent authentication systems with auto-lock protection:

  • Active Directory
    • RiceNet Wireless
    • Rice Exchange Mail
    • Workstation/Kiosk Logins (Windows, Mac)
  • LDAP / Kerberos / Web Single Sign-On
    • Rice Campus Mail
    • Rice Authenticated Web Sites (Canvas, Box, Subversion,  Webmail, etc)
    • Server/Desktop Logins (Linux)
Auto-lockout affects access to everything within that authentication system. 
For example:  If you trigger the auto-lockout by entering your password incorrectly into Webmail (Rice Campus Mail), you will be unable to access any Linux computers that are also using LDAP for authentication, but your RiceNet Wireless would continue to work normally.


Automatic Account Lockout Issues:  What triggers the automatic account lockout?

An automatic account lockout event is usually triggered by old passwords that are saved in an application (like an email client) or a device (like a mobile device, laptop, phone or tablet).

Common places with passwords stored:
  • WiFi/Wireless Network Settings - perform "forget this network (Rice Owls)", re-authenticate with credentials
  • Email Client (Thunderbird, Exchange, Apple Mail, Outlook)
  • iOS / Android 
  • Cached credentials / stored passwords in a web browser (clear the browser cache)
  • Windows stored credentials 
  • Windows Mapped Drives (disconnect "mapped drives" and reconnect with proper credentials)
  • MacOS X/ MacOS Keychain (remove password from Keychain and re-authenticate with credentials, add to Keychain)
Before you change your password:
  • To prevent mobile devices from causing an auto-lockout event, is to disable wireless and/or enable "airplane mode" on the device before changing your password.  Enable the wireless or disable "airplane mode" once the new password has been stored on the device.
  • Identify devices where your password is saved and know what devices that you are currently logged into, whether on campus or at home.
  • If you use a smartphone or other mobile device, forget the Rice wireless network.
  • If you use multiple computers, log off of all of them except one.
  • Save your work and close any open applications. 


What to do in the event that your account becomes locked

Keep calm.  The lock automatically expires if no other failed authentications occur.  While you are waiting, check your phone and laptop for places where you may have saved an old password and change those to use the new password.  If you've done this and you still are unable to figure out what is causing your account to automatically lock, please submit a ticket by sending email to help@rice.edu or by calling the OIT HelpDesk at x4357.




Keywords:NetId Account Password AD SSO Kerberos Campus Mail wireless network computer   Doc ID:73432
Owner:Dean L.Group:Rice University
Created:2017-05-22 12:49 CSTUpdated:2017-06-01 11:36 CST
Sites:Rice University
Feedback:  1   2