Auto Retry for Windows XP PC to Windows 2000 AD resource

[Sam Ng]

Hi,

We have a few users who using Windows XP and are
connected to Win2000 AD. But, he also needs to connect to
another Win2000 AD. For security reason, the two domain
are not trusted.

When user A, who is connected Domain X, try to reconnect
to Domain B, her account will be locked even he keys in
one wrong password. Based on the Security Event log, we
have discovered that there are multiple retry to access
the resource.

Is there any way to minimize or stop the retry?

Thank you.

 

[Steven L Umbach]

I have read about this as described in KB below. You may want to review your
account lockout threshold. MS recommends minimum of ten which is plenty to
deter password attacks unless you have a weak password policy. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;264678

 

[Sam Ng]

Steve,

Thank for the info.

Our security is set to lockout account after 5 attempt
within 1 hour period.

Do you have the URL link for MS recommendation for the
minimum of ten?

- Soon Seng

 

[Steven L Umbach]

Yes. I have seen it in a couple of places. The following White Paper should be of
interest as it also explains why ten should be the minimum. --- Steve

http://www.microsoft.com/downloads/...90-a13b-4977-a4fc-3e2b67e3748e&displaylang=en
http://tinyurl.com/22uz8 --- same link as above in case of wrap.