|
Posted by =?Utf-8?B?UmF5Um9nZXJz?= on July 16, 2008, 5:49 pm
If you were Registered and logged in, you could reply and use other advanced thread options
"Steve Riley [MSFT]" wrote:
> I'd encourage you not to use account lockout. I know that some of our
> published guidance recommends it, but that was written some time ago.
> Account lockout is expensive -- the average cost per call to a help desk is
> $70. Plus, it creates a situation in which an attacker can intentionally
> lock out some or all of your users -- a kind of denial of service attack. So
> long as you're using good (by that I mean long) passphrases, then you really
> don't need account lockout.
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>
> > I have account lockout policy applied to the domain. I created an account
> > (not a default administrator account) which is member of domain admin, is
> > there a way to have this admin account exempt from this lockout policy?
> > Thanks!
>
| 
XML site map