Windows 10: Have users that cannot sign into domain computers

I have multiple users getting locked out of their machines. They cannot log back into the machine. Error message: "the referenced account is currently locked out and may not be logged on to" It looks like it may be related to sign in attempts, however, no sign in attempts have been made. Correct username and passwords are used. Signs into domain just fine Why is Microsoft locking people out of their own machines ? Can we have this stop ? It is terribly un-professional and unproductive to have Microsoft stop us from using our machines.

:)

 

Can't login as local user after adding a computer to a domain


Here are the steps I took. Please tell me if I should have done differently.

1. On the server end add the user and computer to the domain in advance.

2. Fresh install windows 10 and make the first username Admin.

3. Once at desktop rename PC to match PC name on domain i.e. Workstation001.

4. Add computer to mydomain.local and when asked for username and password I entered the credentials for the new user.

5. Restarted the PC and signed into mydomain\newuser without any problems.

However now when I try to access the original local Admin account by typing 'Workstation001\local Admin' as the username and then the password. It keeps saying password invalid.

So I logged back into the domain account and tried resetting the password to Admin and then tried signing in as admin again, still no luck.

Currently there are 2 accounts on the computer one of them is a local/domain account for newuser and the other is a local Admin account which I cannot access.

What kind of glitch is this? Should I have not joined the domain through the original Admin account and instead added a local user to the PC 'newuser' and then sign in as that user locally then add them to the domain through their own local account? I didn't think this was necessary.

 

Getting a domain name...

Just simple 3 steps to make your website glow to millions…
Step 1: Sign up now and get a FREE domain!
Step 2: Design your new website in minutes!
Step 3: You are live! Share your life online!

Click here…

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account? The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join. Thoughts?