DSclient causing problem on Account lockout Threhold

[michaelszie]

hi

I have set the Account lockout threshold invalid logon
attempts to 3 try but the moment when I typed the wrong
password for the first attempt , my account will be
locked . I need the Dsclient to be installed on my win98
workstation as my Win2k Domain is Native mode. If I
uninstalled the Dsclient on my win98, the invalid logon
attempt problem solved .

Is there any patches for Dsclient so that I can used it
on win98 workstation while not affecting the invaild
logon attempt issue.

Thanks

 

[Buz [MSFT]]

You should consider setting the threshold higher. I believe 15 is the
current Microsoft recomendation. A normal clients will be charged for 2 bad
attempts if a password is mistyped (one for Kerberos, one for NTLM).


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Guest]

If I set to the invalid logout attempts to 15 , how many
attempts failure will my accounts be disable ?

But why the moment I uninstalled the Dsclient , 3
attempts invalid logout threshold allowed me to fail on 3
attempts before the accounts get lockout. With Dsclient
installed , 1 attempts login faliure will disable the
user account. I check the web and it did mentioned about
some hotfixes for Dsclient but must login a incident to
Microsoft to get this hotfixes. Not sure whether the
hotfixes for Dsclient will solve the Invalid logout
threshold problem ?