User Cannot login after changing AD properties

Question

I am having a strange issue with my FBA authetication. I have a SharePoint site configured to use FBA with AD server. Recently I changed properties for few AD accounts. After that those users are not able to login to the SharePoint site. It simply says invalid password. The WFE is logging an error "An exception occurred when trying to issue security token: The security token username and password could not be validated.." whenever these users try to login. For all others it works perfectly.

here is the powershell I used to update the AD user account

if($state){
            Set-ADUser -Identity $uName -State $state
        }

I don't understand what is going wrong. Does this mean the "Set-ADUser" command corrupted the user accounts?

[UPDATE]

Found the problem but I do not know how to solve it. In the script mistakenly I added "-l" option. With this option the command corrupts the user account. Is there any way I can recover it?

Set-ADUser -Identity $uName -State $state -l $city

Please help.

Thank you

Answer 1

As Mark pointed out in his comment, the "-l" in the command "Set-ADUser" was a mistake and "userWorkstations" attribute got set with invalid values. Hence AD denied access and it reflected on FBA as invalid username and password. Ran another script to fix that attribute and all works fine now.