Strange issue
I am running IIS5 and have disabled anonymous logins. Security is breathing down my neck regarding user accounts. This issue is that we set a policy that will lock out an account after 3 failed logins.....great. The problem is that the user can still get in even when the account is locked out. If I restart (not stop and start) IIS services the the lockout is effective. This would be a bad thing to restart IIS services.
Any ideas ?
I am running IIS5 and have disabled anonymous logins. Security is breathing down my neck regarding user accounts. This issue is that we set a policy that will lock out an account after 3 failed logins.....great. The problem is that the user can still get in even when the account is locked out. If I restart (not stop and start) IIS services the the lockout is effective. This would be a bad thing to restart IIS services.
Any ideas ?