|
Posted by Roger Abell [MVP] on June 7, 2007, 1:28 pm
Please log in for more thread options
Andrey
You really only need to ask a question once, and when someone
has time and info to share they will do so.
If your environment has lockout defined, then any account will
get lock it the thresholds are triggered. One does not exempt a
selection of accounts from the lockout policy. However, one
can look at alternatives, such as requiring those account to use
smartcard login.
Many now recommend not having a lockout policy as it can
cause denial problems and increase helpdesk costs.
The general recommendation for highly priv'd accounts is to
use a form of two-factor authentication (eg. smartcard) or if
using username/password then use long passphrases (such as
"This iS my 1 and only pwd!@#" or better yet, include some
alt key combos).
> Hi!
> How can I protect admins account from lock out in case
> of external intrusion?
> What methods MS recommend to protect admins
> password and accont?
>
> Regards!
>
| 
XML Sitemap