|
Posted by Steve Riley [MSFT] on September 5, 2007, 3:19 pm
Please log in for more thread options Actually, even though the account lockout feature exists, we recommend that
you not use it. See my article at
http://blogs.technet.com/steriley/archive/2007/09/04/passwords-policies-once-again.aspx
for further explanation.
--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com
You may want to separate them to a different OU and set up different GPO
with Security settings (lock-out, attepmts). The DOMAIN\Administrator
account does not lock out, ever.
If you "protect" accounts from lock-out, you give more chance to brute-force
password, is that your intention?
Be more specific on what you want to achieve?
My bet you want to find out the persons who try to hack in, and block THEM
access.
> Hi!
> I'm looking information about Microsoft recomended metods to protect
> admins
> account & password.
> How protect account from lock out, etc. by GP or other tool.
>
> Regards!
| 
XML Sitemap