Re: net accounts result interpretation

From: Thor Kottelin (thor@anta.net)
Date: 04/21/03

  • Next message: Aleksandar Perisic: "Disable log-on screen" 
    From: Thor Kottelin <thor@anta.net>
Date: Mon, 21 Apr 2003 11:57:53 +0300

    Lawrence wrote:
    >
    > Hi, can anyone help me to interpret these settings which I have ran this
    > command "net accounts" under Win NT 4 command prompt.

    > Lockout threshold: 4
    > Lockout duration (minutes): Never
    > Lockout observation window (minutes): 30

    Aren't those the account lockout policy settings? Check out User
    Manager|Policies|Account|Account Lockout.

    Thor 

    -- 
http://thorweb.anta.net/		PGP public key available
"Women should always wear tight clothes, and men should
carry powerful handguns."	- Calvin (by Bill Watterson)
  • Next message: Aleksandar Perisic: "Disable log-on screen"

    Relevant Pages

    • Re: Network + AD = Tighten Security
      ... Well there is a lot that can be done depending on how you want to balance security ... I would be careful about setting your lockout threshold too low. ... addition I would enable auditing of logon events on the domain controller and any ... have to prevent users from having access to IE settings to undo what you have done. ...
      (microsoft.public.win2000.security)
    • Re: Account Lockout GPO
      ... policy settings ie lockout time, password length etc the setting change ... We have 3 DC's all on the same site, I can force policy replication ... > I'm trying to enable the Account Lockout features in Group Policy. ...
      (microsoft.public.win2000.security)
    • Re: Reset account lockout counter after
      ... I believe you can set it to whatever you want if the lockout duration is 0. ... FYI MS recommends that lockout threshold be no less than ten bad attempts. ... Account lockout is a dual edge sword that can result in DOS attacks against ...
      (microsoft.public.win2000.security)
    • Re: GPO Settings not applying
      ... computer settings or in the user settings is being applied. ... account lockout policy to lockout 3 failed login attempts. ... I assume that you want to configure the lockout policy for domain ...
      (microsoft.public.windows.group_policy)
    • re: Default Domain Policy - Password Policies Not Applying Correctly
      ... what DC are you reading the settings from? ... Default Domain Policy - Password Policies Not Applying Correctly ... initially take, but the password length re-sets itself to 0 chars, lockout ...
      (microsoft.public.win2000.group_policy)