Re: Account Lockout Policy

From: Roger Abell [MVP] (mvpNOSPAM_at_asu.edu)
Date: 05/11/03 

Date: Sun, 11 May 2003 00:19:54 -0700

No, they did fix it. What I am guessing is that somehow
your system has been regressed. About the only thing
to do is to reapply SP 1 and then reapply the post SP 1
patches - a major pain - or, live with it (and whatever
else might be regressed) until SP 2. 

-- 
Roger 
"eman" <ehar32@hotmail.com> wrote in message news:03c901c3176c$cf6eae70$3001280a@phx.gbl...
> I've tested your work around and it works.  What I'm 
> guessing is that MS didn't fix or find a fix for that 
> issue yet.
>   >-----Original Message-----
> >Thank you for your quick responce again.  I do have the 
> >auditing of security events for login set for success 
> and 
> >failed logons and I checked the log file and it only 
> >showed the one failed login.
> >
> >Here's a strange twist when I use RD I can try and log 
> as 
> >many times as I like without a account lockout after 3 
> >tires.
> >
> >I will try your suggestion.  Thank you.  
> >
> >>-----Original Message-----
> >>Hmmmm,   I had thought this was cured with SP1.
> >>When the Welcome screen is displayed the system used to 
> >>have to test for which accounts it needed to prompt for 
> >a 
> >>password, and this would result in 2 bad logins being 
> >>charged against the threshold.  Our recommendation then 
> >>was to use no fewer than 5 bad attempts and a time 
> >>threshold in the 50 minute area or more.
> >>That may serve as an unacceptible but usable workaround 
> >>for you, but one needs to figure what is charging you 
> >the 
> >>other two tries within those 2 minutes.
> >>Have you enabled auditing of security events for login 
> >>success and failure ?  If so, are there extra failures 
> >showing ?
> >>
> >>-- 
> >>Roger 
> >>
> >>"eman" <ehar32@hotmail.com> wrote in message 
> >news:02dc01c31693$d5d167a0$a601280a@phx.gbl...
> >>> I'm currently using XP Pro on sp1.  I'm up to date on 
> >all 
> >>> the critical security patches. That is correct, 1 bad 
> >>> login attempt and the account is locked, even with 
> >>> thershold set to 3 bad attempts.  The thresholds are 
> >as 
> >>> follows: 
> >>> Acct lockout duration = 2 min
> >>> Account lockout thershold = 3 invalid login attempts
> >>> Reset acct lockout counter after = 2 min 
> >>> 
> >>> Also, what I noticed was that if I use Remote Desktop 
> >to 
> >>> that machine it lets me attempt as many times as I 
> >like 
> >>> without locking me out.  Thank you for your quick 
> >>> responce, and your assistance is greatly appericated.
> >>>  
> >>> >-----Original Message-----
> >>> >Are you at SP1?  If not, get there and then see.
> >>> >1 bad login try and locked when policy says you have
> >>> >3 allowed bad attempts within the threshold time ?
> >>> >What are the thresholds ?
> >>> >
> >>> >-- 
> >>> >Roger 
> >>> >
> >>> >"eman" <ehar32@hotmail.com> wrote in message 
> >>> news:05ea01c31666$8fef5d50$3401280a@phx.gbl...
> >>> >> I have set the "Account Lockout Policy" to 3X but 
> >it 
> >>> >> locks the account for the specified time period 
> >after 
> >>> the 
> >>> >> first incorrect attempt.  I am at a loss! I've 
> >tried 
> >>> >> resetting the policy but it still defaults back to 
> >a 
> >>> >> lockout after 1 try.  Any ideal on how to correct 
> >this?
> >>> >.
> >>> >
> >>.
> >>
> >.
> >

Relevant Pages

  • Re: Account Lockout Policy
    ... guessing is that MS didn't fix or find a fix for that ... >showed the one failed login. ... >>threshold in the 50 minute area or more. ... If so, are there extra failures ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Tale of debugging and programming logic in c#/sql
    ... > and I pushed it to production. ... I was anxious to find a fix, ... The login page does ... > user authenticates or creates a new login name -- it is based on an ID ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: PLEASE.....ANY HELP GREATLY APPRECIATED
    ... You will have to try to fix this from a second working Windows installation. ... "John John" wrote: ... I wanted to get rid of that annoying login screen on my home computer (which ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: XP does not always recognize login, how to fix??
    ... heard of this before, how do I fix?? ... login the first time I try. ... and have to retype it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP does not always recognize login, how to fix??
    ... heard of this before, how do I fix?? ... login the first time I try. ... and have to retype it. ...
    (microsoft.public.windowsxp.security_admin)