First published on TechNet on Aug 13, 2014
We can recommend an ideal configuration for most of the settings in our security guidance. For example, the “Debug programs” privilege should be grant...
Updated Nov 29, 2021
Version 3.0
Blog Post
In your errata above you mention that lockout should not occur if the last two saved passwords are used. Curious if this would this also apply to initially enabling SCRIL across accounts? When we force SCRIL we see lockouts across accounts but would expect if what you have here holds true, and the attempts were the result of a cached account, we should not be seeing the accounts lock. Is this correct? Any suggestions, short of disabling the account lockout setting for SCRIL enabled accounts, to negate the lockout triggered as a result of the initial flip of the account to SCRIL?