Re: Login Attempts-IAS

Tech-Archive recommends: Fix windows errors by optimizing your registry

The account lockout registry keys, should I do this at the IAS server or the
VPN or RRAS server ?

-Zul

"Tom" <tom_clark100@xxxxxxxxxxx> wrote in message
news:OBLp2LLVFHA.628@xxxxxxxxxxxxxxxxxxxxxxx
> The reg keys look like they do exactly what I'm after, just a shame the
> settings aren't accessible through the mmc.
>
> Thanks Manjunath!
>
> "Manjunath Bharadwaj [MSFT]" <mbhara@xxxxxxxxxxxxxxxxxxxx> wrote in
> message news:O7JM%23vKVFHA.3252@xxxxxxxxxxxxxxxxxxxxxxx
>> Tom,
>>
>> If you want to lockout a user, you can do it using IAS and the account
>> lockout reg keys:
>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/c03f130b-ecc8-4f71-8bb2-cf447a438a18.mspx
>> You can also go to the user's AD properties and change the "Dial-in
>> enabled" property.
>>
>> Hope that helps, Manju
>> +++++++++++++++++++++++++++++++++++++++++++++++
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> "Tom" <tom_clark100@xxxxxxxxxxx> wrote in message
>> news:%23F3CMoKVFHA.4092@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hi,
>>>
>>> I've set-up IAS talking to a Cisco PIX successfully, but I would like to
>>> block the IP address for a certain amount of time if it's unsuccessful
>>> more than three times. Cisco have said they're not sure how to do this
>>> with IAS and I can't see anything in IAS that locks a user out after a
>>> number of unsuccessful login attempts. Does anyone have any ideas
>>> (either on the Cisco or IAS side of things)?
>>>
>>> Cheers Tom.
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: IAS server stops authenticating workstations and users
    ... Have you tested communication between the IAS server and the RADIUS clients ... Also wondering if you have viewed the IAS ... The IAS server stopped logging. ... server and the authentication process has resumed. ...
    (microsoft.public.internet.radius)
  • Re: EAP-TLS Radius problem
    ... Do I understand you correctly that with IAS it is not possible to ... domain that the IAS server is in? ... server that is a member of Domain 1. ... Domain1 runs a Radius server to do authentication for wired 802.1x. ...
    (microsoft.public.internet.radius)
  • Re: Radius Server W2k 2003 without AD ??
    ... SAM user accounts database on the Windows Server 2003 IAS server. ...
    (microsoft.public.internet.radius)
  • Re: 3com wireless AP with IAS problem
    ... Have you configured your IAS server with a server certificate? ... If there is no server certificate you will not be able to do PEAP ... You can ask about RADIUS, IAS, 802.1x, Active directory configuration and Certificate services, related to IAS and RADIUS ...
    (microsoft.public.internet.radius)
  • Re: AD required to use IAS?
    ... >> I want to set up wireless users to authenticate via IAS to get access ... Does the IAS server have to be in a domain or can I ... > another company) whose root CA certificate is already in the Trusted Root ...
    (microsoft.public.internet.radius)