• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1035
  • Last Modified:

AD Account Lockout duration

Hello, I have a quick question one of you folks may be able to answer.  

I need to find out what the current ISO, etc industry standard AD lockout duration recommendations are.  Ive found that NIST and the NSA recommend 15 minutes and SANS recommends 240 minutes but I would like to have another source (hopefully in black and white terms) so that I can bring that info to my CIO.  

Currently we have it set to 0, this requires me to unlock every locked account manually.
0
SSNYT
Asked:
SSNYT
  • 2
2 Solutions
 
Keith AlabasterCommented:
There is no industry standard on this setting becuase there is no standard security policy that would meet the security requirements of every organisation. In truth, the only likely 'starting standard' in use are the settings Microsoft put out during the initial deployment of AD.

Some installers may change the number of attempts before lockout occurs, some may change the time duration before new attempts can be made etc; the fact is though that 99 times out of 100 an installer - or the admins that take over the installed environment - will change one or more settings based upon their specific security policy needs to something other than the MS defaults. It is almost a ritual.

The reality is that each organisation will set their own standard based upon their specific documented security policy. Without a security policy document, what would be the basis of setting any of the parameters to a particular value?
0
 
santoshmotwaniCommented:
Its depends on your industry and enviroment . I manage call centre and we have lock out time of 10 mins.
0
 
SSNYTAuthor Commented:
Thanks Keith, that was the answer I found as well.
0
 
Keith AlabasterCommented:
Welcome :)
0

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now