User Permissions

  • Thread starter Thread starter Adam
  • Start date Start date
A

Adam

I currently have a policy in place that locks out user
accounts after 3 failed logins. Unfortunately, as you'd
expect, we seem to end up unlocking accounts on a regular
basis!!

I'd like two of my users, that work on a helpdesk, to be
able to unlock user accounts and also be able to
enable/disable user accounts - but have no other rights on
the server (except of course for the ability to log into
it!!). Can this be done or am I resigned to putting them
into 'power users' and therefore let them to alter
passwords etc too.

Any advice warmly received!!

Adam
 
One thing to keep in mind is that authentication's to other remote sources
will also count as an authentication attempt, for instance if they change
their password and keep static mapped drives, it is possible that
authentication is taking place there. I would move it up to 5 attempts or 6
and see what is happening there.
 
Back
Top