account lockout policy

From: Josh Burkey (jdburkey_at_nebraska.edu)
Date: 02/18/04


Date: Wed, 18 Feb 2004 11:26:52 -0800

I was wondering what resets the bad password count.
Everyone keeps telling me its the administrators job to
reset it, and I know this, I am the administrator. But
other than the admin unlocking the account, the entering
of the correct password, and the reassignment of a
password, what else will reset the bad password counter?
We have someone that keeps trying to gain entry to a
normal user account on our domain, and they keep getting
the account locked out. Then they come right back after
that and are able to keep trying, like they reset the
counter themselves. Our lockout happens after 6
attempts, and our duration settings are at the max
(99999) which is about 70 days. So the account they are
trying to access gets unlocked somehow, and allows them
to keep trying. It's not a huge deal cause they aren't
gaining entry, and won't. But I need to know how they
are accomplishing this. Could someone please tell me?
Thanks, Josh Burkey



Relevant Pages

  • RE: Password disappears
    ... account password will be reset to empty automatic. ... SBS infected by Trojan horse. ... Configure account lockout policy. ...
    (microsoft.public.windows.server.sbs)
  • RE: Quick question on resetting computer accounts in AD
    ... and recreating the account. ... Is it okay to use the reset account function? ... SBS Server Management console does not have "Reset Account" command to ... In fact, the SBS Server Management console has already integrated ADUC, you ...
    (microsoft.public.windows.server.sbs)
  • RE: Reset of local user password deleted compressed folders
    ... I suggest you search the hard disk to confirm if the files are deleted. ... For any of the following resolutions to work, the user's original account ... This password recovery disk must have ... Click "use your password reset disk". ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Single sign on
    ... How to authentificate an user via telephon? ... > Avatier has a product which would allow users to reset their own passwords ... >> for the person whose account is reset. ... >> would only be accessible by the person whose account is reset. ...
    (Security-Basics)
  • Re: No access to encrypted files after Password change
    ... Yea Howard, you are quite right, that would make EFS ... That is expected when the pwd is reset rather than ... >>Change requires that you be logged in as the account ... >>> Microsoft says that once you encrypt ...
    (microsoft.public.windowsxp.security_admin)