Re: Account Lockout Policies

[Valdis Kletnieks <Valdis.Kletnieks () VT EDU>]

On Tue, 11 Jul 2006 15:45:23 EDT, "Cheek, Leigh" said:

> If the lockout duration is set to the Administrator Unlocks (0), then
> you set yourself up for a denial of service attack. As an information
> system auditor, I use the Center for Internet Security or NIST as my
> guides for best practices.

As one of the un-indicted co-conspirators :) of the CIS stuff (I didn't
do the Windows one, but was involved in the Solaris, RH Linux, and AIX
ones), I'm always glad to see the CIS guides serving a useful role in
the BCP arena.. Thanks for the vote of confidence...

Attachment: _bin
Description: