Re: all domain accounts locked out !!!
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx>
- Date: Fri, 14 Oct 2005 02:08:58 -0500
Microsoft recommends that you use a lockout threshold of no less than 10
attempts and as many as 50 if you use account lockout assuming you have
enforced complex passwords in your domain ideally with a password length of
at least eight characters. Even with a threshold of 50 that is plenty
adequate to defend against brute force password attacks against complex
passwords.
If you scan your network with a vulnerability assessment tool like MBSA that
can lockout accounts as it will try a number of weak passwords as part to
the vulnerability scan. Worms can also lockout accounts though they usually
target the administrator account. Also check the security logs on the domain
controllers and domain workstations for failed logon attempts that may give
you a clue as to what is going on. The failed logons will have a timestamp
for instance that may be helpful information. To get the information you
need you should enable auditing of "account logon" events for success/
failure, "logon" events for failure only, and account management events for
success and failure. In Domain Controller Security Policy enable auditing
of "logon" events for success and failure. --- Steve
"Misaro" <Misaro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:07A71B36-4FEB-4A60-BD3D-92C8E63FBED6@xxxxxxxxxxxxxxxx
> Incredible !
>
> All domain users accounts got locked out !! I have no idea what was the
> reason to happened this situation .Thanks god I had a open console in my
> computer to access the LDAP !!
>
> The default domain group policy shows me :
> Account Lockout Policy was
> -Account lockout duration =
> 30minutes
> -Account lockout threshold = 6
> attemps
> -Reset account lockout after =
> 30 minutes
>
> Now , the policy shows Account lockout threshold = 0 invalid attemps,
> while i keep researching the possible cause of this critical issue.
>
> How did I fixed it = umm i just run the microsoft's Lockout Status tool
> trying to unlock accounts and suddenly all accounts came back to " unlock
> user state".
>
> I will thanks any comments !!!
>
>
.
- Prev by Date: Re: Hang @ Applying Computer Settings/Applying Your Personal Setti
- Next by Date: Re: Protect a File From Deleting
- Previous by thread: Protect a File From Deleting
- Next by thread: Software Distribution using Group Policy
- Index(es):
Relevant Pages
|
