Meheradaha u diraya Windows Server si ay u maamulaan kombiyuutarada iyo siyaasadaha kale waa muhiim. Qaybta fiican ee ku saabsan maaraynta server-yada waa inaadan u baahnayn inaad jir ahaan ag joogto. Waxaad mar walba meel fog ka geli kartaa server-ka meel kasta. Taas macnaheedu waxa weeye in qof kale uu isku dayi karo sidoo kale inuu galo. Maqaalkan, waxaanu ku wadaagi doonaa sida aad u habayn karto Qufulka Koontada Macmiilka ee Helitaanka Fog^{(Remote Access Client Account Lockout)} ee Windows Server adoo isticmaalaya habka Diiwaangelinta.

Habee Qufulka Koontada Helitaanka Fog^{(Remote Access Client Account Lockout)}

Haddii aad la yaaban tahay sababta ay u jirto habayn quful ah, markaa waa inaad hubiso inaad ka ilaaliso weerarka. Markaad naqshadayso, kaliya ma hubin doonto inaad ilaaliso weeraryahanada sameeya male-awaalka laakiin sidoo kale kuwa qaadaya weerarka qaamuuska. Waxay ku dhici kartaa isticmaale sax ah oo aan xasuusan erayga sirta ah ee saxda ah. Qufulku wuxuu hubinayaa in isticmaaluhu aanu awoodi doonin inuu isku dayo inuu weeraro muddo wakhti ah, taasoo ka dhigaysa amniga guud mid ka wanaagsan.

Si kastaba ha ahaatee, waxay sidoo kale ka dhigan tahay inay xiri karto isticmaalayaasha sharciga ah, taas oo ka cadhaysiin karta. Maqaalkan, waxaanu sidoo kale ku tusi doonaa sida aad gacanta ugu furi karto macmiilka gelitaanka fog.

Iyadoo ku xiran waxa aad u isticmaalayso xaqiijinta, u habbee goobaha diiwaanka si waafaqsan. Haddii aad isticmaalayso Microsoft Windows Authentication , ka dib u habbee diiwaanka Server-ka Helitaanka Fog^{(Remote Access Server)} . Laakiin haddii aad u isticmaalayso RADIUS RAS ^(RADIUS),^(RAS) ka dibna ku habbee Server Xaqiijinta Internetka^{(Internet Authentication Server)} ama IAS .

Waa kuwan liiska waxyaabaha aanu habayn doono:

• Tirada^(Number) isku dayga guul daraystay ka hor xiritaanka
• Wakhtiga ka dib waxa dib loo dajin doonaa miiska qufulka

Hubi^(Make) inaad kaydiso diiwaanka ka hor inta aanad wax isbedel ah samayn.

Daar galitaanka fog ee Koontada Qufulka^{(Remote Access Client Account Lockout)}

Furo Registry Editor adiga oo ku qoraya Regedit Run Quick oo taabo furaha Gelida^(Enter) . Hel^(Locate) ka dibna dhagsii furaha diiwaanka ee soo socda:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout

Hel ka dibna laba-guji qiimaha MaxDenials . U deji qiimaha wax kasta oo ka sarreeya eber, taas oo sidoo kale ka dhigan tahay inay tahay tirada isku dayga guul daraystay. Markaa haddii aad laba u dejiso, isku dayga saddexaad wuxuu keenayaa xannibaad. Guji OK^{(Click OK)} si aad u xaqiijiso

Marka xigta, laba-guji qiimaha ResetTime (mins) , kaas oo ah hexadecimal. Qiimaha caadiga ah waxaa loo dejiyay laba maalmood, markaa iska hubi inaad u dhigto si waafaqsan siyaasadda shirkaddaadu raacdo.

Guji OK, ka dibna jooji Tifaftiraha Diiwaangelinta^{(Registry Editor)} .

Tafatirka Diiwaangelinta si gacanta loogu furo macmiilka Helitaanka Fog^{(Access Client)}

Adoo u malaynaya inaad leedahay akoon qufulan, oo aad u baahan tahay inaad furto sababtoo ah wakhtiga xidhitaanku aad ayuu u dheer yahay. Mar kasta oo isticmaaluhu laxiro, waxaa la geliyaa qaabka DomainName:UserName . Si aad meesha uga saarto qufulka, waxaad u baahan tahay inaad tirtirto.

• Fur Tifaftiraha Diiwaanka oo u gudub jidka soo socda.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout

• Soo hel  Magaca Domain-ka:^{(Domain Name:User Name)} Qiimaha Isticmaalaha, ka dibna tirtir gelida.
• Jooji Tifaftiraha Diiwaanka^{(Quit Registry Editor)} oo hubi haddii koontada adeegsaduhu ay awood u leedahay inay la gasho aqoonsiga saxda ah.

Taasi waxay ku saabsan tahay. Had iyo jeer hubi inaad kaydiso dejimaha diiwaangelinta ka hor intaadan wax isbeddel ah samayn.

Waxaan rajeynayaa in boostadu ay ku siiso aragti cad sida aad u habayn karto qufulka oo aad sidoo kale uga furto macmiilka fog.

Configure Remote Access Client Account Lockout in Windows Server

Busіnesses that deploy Windows Server tо manage computers and other policies are crucial.  The nіce part about managing servers is that you don’t have to be physically around it. You can always remotelу log in to the ѕervеr from anywhere. That means somеbody else can also try tо login as well.  In this post, we will share how you can configure Remote Access Client Account Lockout in Windows Server using the Registry method.

Configure Remote Access Client Account Lockout

If you are wondering why there is a lockout setup in place, then it is to make sure to keep attackers at bay. Once you design, it will not only make sure to keep attackers who do guesswork but also those who perform a dictionary attack. It can happen to a valid user who doesn’t remember the exact password. The lockout makes sure that the user will not be able to try to attack for some period of time, making the overalls security better.

However, it also means that it can lock out legitimate users, which can annoy. In this post, we will also show how you can manually unlock a remote access client.

Depending on what you are using for authentication, configure the registry settings accordingly.  If you are using Microsoft Windows Authentication, then configure the registry on Remote Access Server. But if you are using RADIUS for RAS, then configure it on Internet Authentication Server or IAS.

Here is the list of things we will configure:

• Number of failed attempts before lockout
• The time after which the lockout counter is reset

Make sure to take a backup of the registry before making any changes.

Enable Remote Access Client Account Lockout

Open Registry Editor by typing Regedit in the Run prompt and press the Enter key. Locate and then click the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout

Locate and then double-click the MaxDenials value. Set the value to anything above zero, which will also mean it is the number of failed attempts. So if you set to two, the third attempt will result in a lockout. Click OK to confirm

Next, double-click on the ResetTime (mins) value, which is in hexadecimal. The default value is set for two days, so make sure to put it according to the policy your company follows.

Click OK, and then quit Registry Editor.

Registry Editing to manually unlock a Remote Access Client

Assuming you have a locked account, and you need to unlock because the lockout timeout is pretty long. Every time a user is locked out, an entry is made into it in the format of DomainName:UserName. To remover the lock, you need to delete it.

• Open the Registry  Editor and navigate to the following path.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout

• Find the Domain Name:User Name value, and then delete the entry.
• Quit Registry Editor and check if the user account is able to login with the right credentials.

That’s about it. Always make sure to backup registry settings before you make any changes.

I hope the post gave you clear insight on how you can configure lockout and also unblock a remote client.

Related posts

• Sida loo sahlo saxiixa LDAP ee Windows Server & Mashiinada Macmiilka

• Liiska software-ka gelitaanka fogaanta bilaashka ah ee Windows 10

• Ku rakib Aaladaha Maamulka Server Fog (RSAT) ee Windows 10

• Sida loo rakibo oo loo arko Qalabka Maamulka Server Fog (RSAT) gudaha Windows 11

• Dami Saamiyada Maamulka ee Windows Server-ka

• TeamViewer: Gelida Fog ee Bilaashka ah iyo Software ka ilaalinta

• Sida otomaatig loogu sameeyo kaydka Windows Server ee Amazon S3

• Si fog uga gal kombiyuutarkaaga Adigoo isticmaalaya Kombiyuutarka Fog Fog

• Ku xidh Android ku Windows 10 addoo isticmaalaya Mishiinka Fog ee Microsoft

• Soo gal Isticmaalaha Maxaliga ah iyo Maamulka Kooxda gudaha Windows 11/10 Guriga

• Gal Serverka FTP adoo isticmaalaya Command Prompt gudaha Windows 10

• Ku samee Koontaroolada fog ee Kodi Windows 10 adoo isticmaalaya aaladaha Android iyo iOS

• Software-ka ugu fiican ee Desktop-ka fog ee bilaashka ah ee Windows 10

• Hagaaji server-ka RPC waa qalad aan laga heli karin gudaha Windows 10

• Habka fog-fog ayaa wacaya khalad markii la isticmaalayo DISM gudaha Windows 11/10

• Sida loo xannibo Desktop-ka fog ee PC-gaaga Windows-

• Iperius Backup waa kaabta software bilaash ah oo loogu talagalay Windows Server

• Waa maxay Gelitaanka Fog ee Trojan? Kahortagga, Ogaanshaha & Ka saarida

• Mishiinka fogku kuma xidhmi karo kumbiyuutarka fog ee Windows 11/10

• Adeegyada Desktop Fog waxay sababtaa CPU Sare gudaha Windows 11/10