Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Need to impliment a OWA lockout policy, AD one doesnt seem to work

Posted on 2006-11-30
Medium Priority
Last Modified: 2008-01-09
Im trying to impliment a OWA policy so when external users enter the wrong credentials 3 times thier OWA/AD account gets locked out so they are unable to login to OWA (For security reasons)
 I implimented a Group Policy to lockout the AD account, which works the AD account is disabled, but the users are still able to access thier Mailbox via OWA even if their accoutn is disabled. Is there a way to Lockout OWA Accounts ? I thought it would be the same as AD ?

Question by:mattash55
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5

Author Comment

ID: 18044622
Exchange 2003 SP 2, Office 2003
LVL 104

Accepted Solution

Sembee earned 1000 total points
ID: 18044698
If the user has locked out their account, they shouldn't be able to get access to their mailbox. Otherwise there would be a serious security issue.
Do you have more than one domain controller? It could be a replication issue.
Are you using forms based authentication? If not, then you should, as that can help with this issue, as FBA uses cookie control for authentication and allows a session to expire.

LVL 31

Expert Comment

ID: 18045235
Are you sure that the lockout duration is not still at the standard 30 mins?  I can't imagine any reason why they should be able to access OWA alone.  If the lockout is initiated by IIS, though, it might take a while to take effect.  It always used to, anyway.
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  


Author Comment

ID: 18045388
We have two DC`s at our site and 1 DC at the other 5 sites. We`re not using FBA, it`ll enable it and see if that solves the problem

Author Comment

ID: 18045573
Hmm enabling FBA didnt seem to solve it.  OWA is now prompting be for credentials when I log off from the browser :/  ideas ?

I think OWA not locking out was simply down to time, im able to log in with the disbled users account for afew mins and then it just keeps prompting and doesnt go in, so thats OK.

Author Comment

ID: 18045632
dont worry about the Log Off box its ok now

Author Comment

ID: 18046136
Cheers for the help guys, turns out it was just me being impatient :)

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
Are you looking for the options available for exporting EDB files to PST? You may be confused as they are different in different Exchange versions. Here, I will discuss some options available.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question