Re: SP4 and n-2 password protection?

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 06/29/03 

Date: Sun, 29 Jun 2003 10:12:57 -0400

So that means they should have at least two requests like that on top of me spouting it in the newsgroups multiple times
and telling Alliance Premier and telling MCS. :o)

I can understand where it could get resource intensive say maintaining the cache, but maybe have a quick turnaround on
the cache timeout.

Hey Dean do you know if N-2 has a hot fix designation number? 

-- 
Joe Richards
www.joeware.net
--
"Dean Wells" <dwells@mask.msetechnology.com> wrote in message news:umK1StjPDHA.1380@TK2MSFTNGP11.phx.gbl...
> Interesting comment Joe, I submitted the exact same feature request to
> WinSE a couple of months ago as a suggested replacement to the current
> n-2 mechanism.
>
> Dean
>
> -- 
> Dean Wells [MVP / Windows platform]
> MSEtechnology
> dwells@msetechnology.com
> [[ Please respond to the Newsgroup only ]]
>
>
> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
> news:ujE0YxePDHA.2160@TK2MSFTNGP11.phx.gbl...
> > Ah yes, that is supposed to be in there, I forgot about that one. I
> agree if it made it in it should be documented in
> > the list of changes.
> >
> > Good fix, personally I would also like to see a fix where if the same
> password is being sent over and over again even if
> > it isn't one of the last two it won't lock the account. Obviously if
> the same password is constantly being sent, it
> > isn't a hack attempt which lockouts are in place to prevent.
> >
> > -- 
> > Joe Richards
> > www.joeware.net
> >
> > --
> >
> > "Scott" <spauseREMOVETHIS@excite.com> wrote in message
> news:018201c33db2$19e46f60$a301280a@phx.gbl...
> > > There was some ammount of advertising earlier this year
> > > regarding a new capability coming with SP4 and Windows
> > > 2003 called N-2 password protection.  It was designed to
> > > protect accounts from being locked out from there last
> > > two valid passwords.
> > >
> > > This is a critical feature that my company desperately
> > > needs.   There is ZERO documentation regarding the
> > > inclusion of this and other related fixes in SP4.
> > >
> > > Could someone at MS please assist with tracking this
> > > down?  It would also be highly advised to post this
> > > information in the SP4 Readme if it is included as this
> > > changes account lockout behavior and could be unexpected.
> >
> >
>
>

Relevant Pages

  • Re: [Full-disclosure] Google / GMail bug, all accounts vulnerable
    ... ridiculous advisories are generating ridiculous replies that's well ... influence a large number of users to make requests which disrupt, ... Since the favicon.ico object, for some reason, influences the account ... Google / GMail case. ...
    (Full-Disclosure)
  • Linux-India.org is slowly coming back to its feet -- Raju Mathur
    ... If you're a LUG, ... If you don't already have a web site you can create an account and your ... Job Requests ... looking at or evaluating 1000s of other portal systems. ...
    (comp.os.linux.announce)
  • Re: [Full-disclosure] Google / GMail bug, all accounts vulnerable
    ... I guess I am not understanding why this is considered to be a big CSRF ... Do you consider doing a redirect injecting? ... influence a large number of users to make requests which disrupt, ... Since the favicon.ico object, for some reason, influences the account ...
    (Full-Disclosure)
  • Re: Deny Request for Message Read Notification
    ... requests" but both radio buttons are greyed out, ... After processing, move receipts to ... Always send a response ... Becasue I have a POP account in my profile along with my Exchange account, the options on this dialog box are active whereas you, with just an Exchange account, don't have the ability to enable them since they apply to Internet accounts only, as the dialog box says. ...
    (microsoft.public.outlook)