Re: Please help me, it is highly Urgent.............
- From: "Herb Martin" <news@xxxxxxxxxxxxxx>
- Date: Tue, 31 Jul 2007 10:10:16 -0500
"Abhi" <Abhi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DA28C60E-BA5A-45D7-BC29-564077C01D31@xxxxxxxxxxxxxxxx
Herb,
The reason why the threshold is given as 5 is because of security concern.
Our domain is banking domain. If the users accounts are getting locked, it
won't get unlocked automatically, they have to contact us then we only
manually unl*** it. Hope you have understood our concern.
Hope you are also using a 15 chacterer or LONGER password too --
as well as having CLASSES to teach the users both how to choose and
protect their passwords etc.
Persistent drive mappings: Persistent drives may have been established
with credentials that subsequently expired.
Perhaps, but usually such mappings use the LOGON credentials
(not the username/password).
There is SOMETHING out there like that (drive maps, batch files,
programs with passwords, scheduled batches, or services.)
The most likely to do this is schedule batches but then most users
don't have any of these. Users should NOT be running services,
certainly not with their username/password.
Look for places where the actual username/password were entered
and stored.
If the user types explicit
credentials when they try to connect to a share, the credential is not
persistent unless it is explicitly saved by Stored User Names and
Passwords.
Yes, but this should only happen when the user has multiple accounts
(other than the one they logon to the computer with). Consider setting
up trusts and consolidating these accounts.
Every time that the user logs off the network, logs on to the network, or
restarts the computer, the authentication attempt fails when Windows
attempts
to restore the connection because there are no stored credentials.
Who does net use differ by map network drive from GUI?
As far as I know these are the same in this respect. Use logon
credentials BY DEFAULT, allow the user to override these if
desired or necessary (e.g., another account is necessary.)
Is persistant drive mappings are not recommended?
No, they are entirely common.
.
- References:
- Please help me, it is highly Urgent.............
- From: Abhi
- Re: Please help me, it is highly Urgent.............
- From: Herb Martin
- Re: Please help me, it is highly Urgent.............
- From: Abhi
- Please help me, it is highly Urgent.............
- Prev by Date: Re: FSMO drama.
- Next by Date: Re: FSMO drama.
- Previous by thread: Re: Please help me, it is highly Urgent.............
- Next by thread: Re: SSL in Active Directory
- Index(es):