• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 577
  • Last Modified:

Need to impliment a OWA lockout policy, AD one doesnt seem to work

Im trying to impliment a OWA policy so when external users enter the wrong credentials 3 times thier OWA/AD account gets locked out so they are unable to login to OWA (For security reasons)
 I implimented a Group Policy to lockout the AD account, which works the AD account is disabled, but the users are still able to access thier Mailbox via OWA even if their accoutn is disabled. Is there a way to Lockout OWA Accounts ? I thought it would be the same as AD ?

cheers
 Matthew
0
mattash55
Asked:
mattash55
  • 5
1 Solution
 
mattash55Author Commented:
Exchange 2003 SP 2, Office 2003
0
 
SembeeCommented:
If the user has locked out their account, they shouldn't be able to get access to their mailbox. Otherwise there would be a serious security issue.
Do you have more than one domain controller? It could be a replication issue.
Are you using forms based authentication? If not, then you should, as that can help with this issue, as FBA uses cookie control for authentication and allows a session to expire.

Simon.
0
 
LeeDerbyshireCommented:
Are you sure that the lockout duration is not still at the standard 30 mins?  I can't imagine any reason why they should be able to access OWA alone.  If the lockout is initiated by IIS, though, it might take a while to take effect.  It always used to, anyway.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
mattash55Author Commented:
We have two DC`s at our site and 1 DC at the other 5 sites. We`re not using FBA, it`ll enable it and see if that solves the problem
0
 
mattash55Author Commented:
Hmm enabling FBA didnt seem to solve it.  OWA is now prompting be for credentials when I log off from the browser :/  ideas ?

I think OWA not locking out was simply down to time, im able to log in with the disbled users account for afew mins and then it just keeps prompting and doesnt go in, so thats OK.
0
 
mattash55Author Commented:
dont worry about the Log Off box its ok now
0
 
mattash55Author Commented:
Cheers for the help guys, turns out it was just me being impatient :)
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now