control setting for password lockout

[Chris_J_S]

We just stood up Project Server and it locks people out if they screw up the
password so much as even once. Our admins then need to unlock them. Where
is the control setting so we can change the number of invalid attempts to
something reasonable, like 5?

 

[Ben Howard]

Hi Chris, where are the accounts being authenticated - Active Directory or
WSS pluggable authentication?

 

[Chris_J_S]

Hi Ben - my people tell me that we are using active directory.

 

[Gary L. Chefetz]

Chris:

This doesn't make sense. If you are using Active directory with Project
Server, you shouldn't need to enter credentials at all, as this is
background stuff. So, you really need to tell us what version of PRoject
Server you are using: 2002, 2003, 2007? And, you need to get other facts
into your post such as what are the exact steps people are taking to create
the problem.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com

 

[Eric_H]

Hey guys, to answer your question Gary, (I work with Chris.) We have certain
users getting their account locked out when they open PRO and login, not when
they sign into the PWA (active login). I think this is sharepoint based or
something authentication based outside of Server/Project, but I'd appreciate
some direction if you can help.

 

[Chris_J_S]

We are definately on the latest version of Server (2007), all the latest
Service packs, and the latest version of Sharepoint. I've asked my admins
for more details, but basically, when you login to the server you are
prompted with a pop-up requesting your logon name and password. Screw it up
once and you need to get a reset. Very unforgiving. My own admins don't
know where the counter is located. In general, our Customer has us set logon
attempts at 3 before you are locked out.

 

[Gary L. Chefetz]

Chris and Eric:

When you fire-up Project Pro, a logon box should appear. If you're using
Active Directory, then the checkbox for "Enter User Credentials" should be
unchecked. This causes the program to pass the current user credentials
(active login) and eliminates the need to enter credentials. The only time
you would need to enter credentials is if you're logging in from a foreign
domain or you are using forms authentication. Please logon to the server
using Pro and go to Tools > Enterprise Options > Microsoft Office Project
Server Accounts and examine the properties of the profile you're using. If
the radio button for "Use Windows User Account" is selected and you are
logged into the domain in question, you should not have to enter
credentials, ever!

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com

 

[Eric_H]

We are isolated to a foreign domain, it an odd network, that I cannot explain
in that sence but we wor from one domain and our server app is in another,
but we may be able to get it to work by unchecking user creds... I'll have to
try tomorrow.

 

[Gary L. Chefetz]

Eric:

As long as there's a trust relationship between the two domains, it should
work. Otherwise, you're far better off using password management in the OS
to automatically pass the credentials. The fact that you can actively logon
to PWA in the browser indicates that it should also work for the Project
Client.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com

 

[jamie]

We just stood up Project Server and it locks people out if they screw up the
password so much as even once.  Our admins then need to unlock them.  Where
is the control setting so we can change the number of invalid attempts to
something reasonable, like 5?

This uses the IIS Integrated authentication. Under default settings,
IE will prompt three times, and the account is not locked out, but
simply denied access until the user tries the URL again. It sounds
like there is a Group Policy applied to the Project Server that has a
tighter than usual lock out policy. Have your Active Directory person/
people check the Resultant Set of Policy for the server that Project
server is running on. Focus in on:

Computer Configuration\Windows Settings\Security Settings\Account
Policies\Account Lockout Policy


Hope this helps...
James Fraser

 

[Eric_H]

we are fixed, thanks!!!!

Eric:

As long as there's a trust relationship between the two domains, it should
work. Otherwise, you're far better off using password management in the OS
to automatically pass the credentials. The fact that you can actively logon
to PWA in the browser indicates that it should also work for the Project
Client.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com

 

[Gary L. Chefetz]

Great!

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com