best value

  • Thread starter Thread starter Admin
  • Start date Start date
A

Admin

what is the best value shoulde be set it in my group police for:

1-Account lockout duraction
2-Account lockout threshold
3-reset account lockout counter after
 
what is the best value shoulde be set it in my group police for:
1-Account lockout duraction
2-Account lockout threshold
3-reset account lockout counter after
Click to expand...

hi. my first post.
try looking microsoft's
windows 2003 security guide
windows 2000 hardening guide
threats and countermeasures guide
they're all downlaodable from MS site, just search for them.
there are security templates within, everything described, hope it
will help you.
 
It depends on your environment and security needs versus convenience. The link below
from Microsoft has some specific recommendations. I would say for most networks you
should first require password complexity. If that is enabled then you should be
adequately be protected from brute force password attacks with a lockout threshold of
ten, and duration/reset interval of ten minutes. The higher you make the duration,
the more administrators or helpdesk will need to be involved with users. --- Steve

http://www.microsoft.com/technet/Security/topics/hardsys/tcg/tcgch02.mspx
 
Back
Top