diff --git a/ADMX/en-US/ts_block.adml b/ADMX/en-US/ts_block.adml new file mode 100644 index 0000000..1713d3b --- /dev/null +++ b/ADMX/en-US/ts_block.adml @@ -0,0 +1,39 @@ + + + + + + + + Wellbury LLC + Block attempts threshold + At least Microsoft Windows Server 2003 + The number of sequential failed logon attempts (with accounts that are not considered 'block immediately' accounts) that will trigger a block. + Block duration + The duration, in seconds, of a block (either because of reaching the BlockAttempts threshhold or because of a 'block immediately'). + Block timeout + The duration, in seconds, that must elapse between failed logon attempts to reset the count of failed logon attempts for a given IP address. + Black-hole IP address + The IP address used for the black-hole route (for Windows Server 2003). If not specified the default algorithm of selecting the IP address of a network interface with no default gateway specified will be used. This setting is not used in Windows Server 2008 and later versions of Windows. + ts_block + + + + Block attempts threshold + + + Block duration + + + Block timeout + + + + + + + + + + + \ No newline at end of file diff --git a/ADMX/ts_block.admx b/ADMX/ts_block.admx new file mode 100644 index 0000000..df82f42 --- /dev/null +++ b/ADMX/ts_block.admx @@ -0,0 +1,48 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/README.txt b/README.txt index d6926a4..9cfa22d 100644 --- a/README.txt +++ b/README.txt @@ -120,13 +120,13 @@ address of a network interface with no default gateway specified will be used. This setting is not used in Windows Server 2008 and later versions of Windows. -A Group Policy Administrative Template (ADM) file is included with this -distribution that is capable of setting these values. Deploying a GPO -near the top of the domain with the BlockAttempts, BlockDuration, and -BlockTimeout values specified and Site or OU-level GPOs with the -BlackholeIP value specified (as this will vary based on the subnets -where the server computers are located, and is only necessary for -Windows Server 2003 machines) is recommended. +A Group Policy Administrative Template (ADM or ADMX) file is included +with this distribution that is capable of setting these values. +Deploying a GPO near the top of the domain with the BlockAttempts, +BlockDuration, and BlockTimeout values specified and Site or OU-level +GPOs with the BlackholeIP value specified (as this will vary based on +the subnets where the server computers are located, and is only necessary +for Windows Server 2003 machines) is recommended. Script Testing