On 05/23/11 03:18, Ettienne Louw wrote:
> Hi
>
> When a user gets block for too many incorrect logins to his email
> account now he cannot get into his webmail or outlook keeps asking for
> username & password, how/where do you remove him from the block list?
>
> Ettienne
>

You don't.  You set the threshold for lockout low(it's set for 3 
attempts in 5 minutes here).

Tell them to close Outlook, so it stops trying and wait 10 minutes.  The 
lockout period is double the lockout threshold time.

I find our setting is enough to discourage most script kiddies, but is 
not too inconvenient for users.  They tend to be understanding when 
explained to them and by the time they call you, the lockout period is over.

Lyle