TMC IS Systems Management	Welcome Chris Cochran  (T016573)

Set Domain User lock out threshold

Current Status: Approved Request ID: 100950

Change Options:

Comment Only

Complete

Abort

Abort and Reschedule

NOTE: After making your selection and entering an optional comment, select 'Save' to complete.

Change Option Descriptions Comment Only: Saves a comment to this change request and emails the comment to all recipients. Approve: Approves the change and notifies recipients via email that the change has been approved. Decline: Declines the change and notifies recipients via email that the change has been denied. Complete: Completes the change and notifies recipients via email that the change has been completed. Abort: Cancels the change and notifies recipients via email that the change has been aborted. Abort and Reschedule: Cancels the change and notifies recipients via email that the change has been aborted. Also copies the change details to a NEW request for rescheduling. Copy Change: Copies this change request to a new change request for scheduling - DOES NOT affect this request in any way.

Add a Comment:

Notified (Recipients):

Jon Hallgrimsson; Wintel Engineers; COS.com

Comments:

There are 1 comments associated with this change request.

View Application Details

Events:

There are 1 events associated with this change request.

System History:

There are 0 other change requests associated with the Group Policy application.

Application:

Submitted:

Submitter's Name:

Planned Change Start:

Requester's Name:

Planned Change Finish:

Approver's Name:

Approved or Declined:

Heat Ticket:

Completed or Aborted:

Security Impact:

Yes: Will help mitigate brute force/DOS password attacks.

Systems Being Changed:

App Owner          System Name          Application          Jon Hallgrimsson       TMCDC1       Active Directory TMCDC2       Active Directory

Potentially Affected Apps:

Active Directory, Group Policy, Patch Window - P1, Patch Window - P2

Reason & Description of Change:

Account lockout threshold will be set to 150 failed attempts Reset account lockout counter after one week (10080 minutes) This will help protect TMC from brute force/DOS password hacks.

Technical Change Description:

Default Domain Policy will be changed. Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy Account lockout threshold value will be set to 150 Reset account lockout value will be set to 10080 http://technet.microsoft.com/en-us/library/cc748850(v=ws.10).aspx

Testing Done:

Standard GPO change.

Customer Impact:

None up front changes will be noticed by users. However if they do have over 150 failed password attempts their account will be locked. Users will need to contact the help desk to have their account unlocked.

Backout Procedure:

Remove changes to default domain policy.

Comments

4/30/2014 8:04 AM Grant Strang Kitt approved via email.

Events

4/30/2014 8:04 AM Grant Strang approved request on behalf of Kitt Leonard.

Add Recipient:

Select a recipient below and select Notify Now when ready.

------------------- Select One -------------------Alicia MouraAlicia OlguinAndrew BleckovAnita BachAnne MagnusonBill FergusonBill WaltersBowie PoagBrandi MorenoBret HicksBrian BridgesBrian CammarataBrian MassingillCandi SkillingsChauncey WilliamsCheryl GabusiChris CochranChris RitcheyChristina RitterChuck CurtoColleen DooleyCrystal ElefanteDan DellaconaDaniel NelsonDavd ForestDavid SholesDawn KirschenmanDean SilerDebra FreyburgerDenise NavarreteDennis McKinneyDesktop TeamDiane RichterDiane ThompsonDianna DesboroughDNS AdminsDouglas WattDrew Burnette-SolutionsEdith QuinonesEllen GeigerErin SmithFalena ReedGilbert RomeroGina ThomasGinny GoldnerGrant StrangGus ThompsonHoyt JonesJason HinchliffeJenn MadridJessica RamirezJim BurdJonathan CainJose VillalobosJoy HallJuanita MurrietaJudy DowneyJustin ClarkKarl CoomlerKathy BurkeKent KirchnerKevin PierceKimberly HuffmanKirk RuffKitt LeonardKristy SkaarKyle BuehlerLarry DoeLeila ShehabLinda ConwellLinda PasleyLisa KobranLucy MaupinMalinda ReddingMarcy TateMaria PersonsMario MartinezMary ThiermanMatthew MaynardMelissa DominguezMelissa ToneMichael Griffis Michael LaetschMichael ResnickMichelle ParvisMike CecilMikhail AverbukhMilena VariNetOpsNina MazzolaOSG EngineersPatch Window 1 DLPatch Window 2 DLPatch Window 3 DLPatch Window 4 DLPatricia KingPatti KubistaPaul LemmonsPerry HallPiper FrithsenRachel TineoRESM NotificationsRev CycleRicardo GuzmanRochelle ThompsonRose MontanoSanjay TimbadiaScott MacLachlanSetsuo RayShayne KellyStephanie WinklerSteve TitusSusan SnedakerSuzanne StallkampTony CardenasWilliam ClarkeWilliam FlemingWintel InfrastructureYvette Bolla