Account Lockout Policy applies to Change Password option???

[ricaforrica]

Greetings!


In these Microsoft pages,

http://technet2.microsoft.com/windo...4def-4f5f-9480-41de6010fd291033.mspx?mfr=true

(in "Account lockout threshold") and

http://technet2.microsoft.com/windo...7b31-45a8-b11f-449fe7e7c62e1033.mspx?mfr=true

(in "Troubleshooting Account Lockout"), I read that, among other causes, "Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password-protected screen savers" may result in the account lockout.

My question is:
And when I try to change the password (CTL-ALT-DEL -> "Change Password" option) and insert a wrong value in the "Old password" field, does it count as a failed logon attempt? That is, if Account Lockout Threshold = 3 and I insert a wrong value in the "Old password" field and click the "OK" button three times, will the account be blocked?

Is there any Microsoft resource where I can find this information?

Thanks in advance for your help!

Best regards,


Ricardo Pinto.

 

[ITPangaeaArchitect]

Yes that is correct. It will lock the account. The purpose of supplying the old password is so LsaChangePassword API can verify you really are the user. Its the same as a basic authentication really....

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[ricaforrica]

Hello Brandon!

I will check the web for information on LsaChangePassword API, just to know some more.
But that was what I really needed to know, thanks for your help.

Ricardo.

 

[ITPangaeaArchitect]

I'm not sure how much youll find on the web for the API. I think the best you will find, is to study the LSA documentation online, which describes basic API functions.

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.