[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

How can I change number of password attempts?

Posted on 2011-02-28
8
Medium Priority
?
1,150 Views
Last Modified: 2012-05-11
I would have thought this would have been under "Change password policies" in SBS Console, but that only lets you change complexity, number of charachters and if it expires or not.

I couldn't see where I could change the policy on how many attempts each user gets before they are locked out.

SBS 2008 Standard Edition.

Thanks.

Bert
0
Comment
Question by:Bert2005
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 13

Accepted Solution

by:
AustinComputerLabs earned 2000 total points
ID: 35003737
I use group policy (GP).
In the GP edit:
Computer Configuration
Windows settings
Security settings
Account lockout policy
Account lockout threshold
0
 
LVL 1

Author Comment

by:Bert2005
ID: 35003881
Shoot. And, I was in the GP edit, but couldn't find it. Thanks. Worked perfectly.
0
 
LVL 1

Author Comment

by:Bert2005
ID: 35003894
Austin,

Do you know if I can override the timeout as the domain admin. I mean if my staff gets locked out, do we have to wait the 30 minutes, or can I unlock them from the server?
0
Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

 
LVL 13

Expert Comment

by:AustinComputerLabs
ID: 35003901
Glad I could help.
Take care and thanks for the points.
0
 
LVL 13

Expert Comment

by:AustinComputerLabs
ID: 35003908
Right above the Account lockout threshold is the Account lockout duration.
0
 
LVL 1

Author Comment

by:Bert2005
ID: 35004081
Thanks. Sorry to ask the question again.

From what I understood, there are three settings.

1. How many attempts
2. The duration as you state which is how long before you are no longer locked out
3. And, the reset, which is the amount of minutes before a wrong attempt is forgotten

I think I read that if the duration is set to zero, then the admin has to unlock it.

But, it didn't state if you could have both. I mean it's good in case a hacker is trying to get in to have it lock after so many attempts. And, then make the lockout duration long enough that it is difficult to just try over and over.

I guess I see a scenario where my receptionist locks herself out, and she has to wait 30 minutes before she can get into her computer. I am thinking there must be a way (without changing her password) to unlock her password as the admin. Maybe not.

Hopefully, that wasn't too confusing. :-)

Thanks again.
0
 
LVL 13

Expert Comment

by:AustinComputerLabs
ID: 35012944
If I understand what you are asking:
You are OK with the GP settings working for unattended or hacking protection.
But when the client accidentily locks it out because of a forgotton password, you like to know how to override the wait time.
If this is the case, I have not tried it but in AD Users and Computers I believe you will be able to right click the client object and choose enable account during the lockout wait time to end the lockout manually.
I hope I understood correctly.
0
 
LVL 1

Author Comment

by:Bert2005
ID: 35013614
Yes, you understood correctly. And, your answer was perfect.

As an FYI, I did try it, and it worked. :-)

Thanks very much.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question